User Management

Overview

The User Management category provides comprehensive tools for managing users, roles, and permissions within your admin panel. This system allows you to control who has access to your application, what they can do, and how their permissions are organized through a flexible role-based access control (RBAC) system.

Modules in This Category

Users

Manage user accounts, including creating new users, editing user information, assigning roles, and controlling user status. The Users module is your central hub for all user-related operations.

Key Features:

• Create and manage user accounts
• Search and filter users by role, status, or name
• Assign multiple roles to users
• Bulk role assignment and removal
• View user permissions and activity

Read full documentation →

Roles

Define and manage roles that group permissions together. Roles make it easy to assign consistent sets of permissions to multiple users at once.

Key Features:

• Create custom roles with specific permissions
• Edit role permissions
• View users assigned to each role
• Manage role descriptions
• Handle user reassignment when deleting roles

Read full documentation →

Permissions

View and understand the permission system that controls access to features throughout the admin panel. Permissions are organized by category for easy management.

Key Features:

• Browse all available permissions by category
• View which roles have specific permissions
• Understand permission naming conventions
• Synchronize system permissions
• See permission assignments across roles

Read full documentation →

Impersonation

Temporarily log in as another user to troubleshoot issues, test permissions, or provide support without needing their password.

Key Features:

• Impersonate any user account
• View the system from a user's perspective
• Test permission configurations
• Safely exit impersonation
• Audit trail of impersonation sessions

Read full documentation →

Common Workflows

Setting Up a New User

1. Create the user account in the Users module
2. Assign appropriate roles based on their responsibilities
3. Verify their permissions in the user details view
4. Optionally test their access using Impersonation

Creating a Custom Role

1. Navigate to Roles and create a new role
2. Give it a descriptive name and description
3. Select the appropriate permissions from the Permissions list
4. Assign the role to relevant users
5. Test the role's access using impersonation

Managing User Access

1. Use the Users module to find the user
2. View their current roles and permissions
3. Add or remove roles as needed
4. Use bulk actions for multiple users with similar needs
5. Monitor changes in the audit logs

Troubleshooting Permission Issues

1. Check the user's assigned roles in Users
2. Review the role's permissions in Roles
3. Verify the specific permission exists in Permissions
4. Use Impersonation to test the user's actual access
5. Adjust roles or permissions as needed

Best Practices

• Use Roles, Not Direct Permissions: Assign permissions to roles, then assign roles to users. This makes management much easier as your team grows.

• Follow the Principle of Least Privilege: Only grant users the permissions they need to do their job. Start with minimal access and add more as needed.

• Use Descriptive Role Names: Name roles based on job functions (e.g., "Content Editor", "SEO Manager") rather than generic names.

• Regular Access Reviews: Periodically review user roles and permissions to ensure they're still appropriate.

• Test Before Deploying: Use impersonation to test new roles and permission configurations before assigning them to real users.

• Document Custom Roles: Add clear descriptions to custom roles explaining their purpose and intended use.

Security Considerations

• Super admin accounts have unrestricted access and should be limited to trusted administrators only
• System roles (super_admin, admin) cannot be deleted or modified to prevent accidental lockouts
• Users cannot delete their own accounts to prevent accidental self-removal
• All role and permission changes are logged in the audit system
• Impersonation sessions are tracked and auditable

Quick Links

• Create a New User
• Assign Roles to Users
• Create a Custom Role
• View All Permissions
• Impersonate a User