Users (admin)

The admin Users page lives at /admin/users and is gated to global admins.

Roles

These are account-level roles — separate from workspace and project roles (see Permissions model).

• ADMIN — full instance access; can manage every user and workspace.
• USER — a standard account. What they can see and do is decided by their workspace and project roles, not this one.

Two ways to remove someone

Disable and Delete are independent — pick by intent:

• Disable is a reversible login block. The user stays listed and still counts toward your seats; flip it back with Enable at any time.
• Delete moves the user to Trash (a soft-delete). They disappear from the Active list, can no longer sign in, and their seat is freed. You can restore them later.

Changing role and name

Each active row has an always-visible role dropdown (Admin / User) and a pencil button to edit the user's name — neither is hidden behind hover. A role or name change takes effect on the user's next sign-in. You can't change your own admin role or disable your own account.

Trash (soft-delete)

Switch between Active and Trash with the toggle above the table; the Trash tab shows a count of everyone currently trashed.

• Trashing a user signs them out everywhere and frees their seat immediately.
• Restore re-enables the account and re-consumes a seat — if you're already at your seat limit, restore is blocked until you free one.
• Trashed users are kept indefinitely; there is no automatic purge.

You can't trash yourself, the bootstrap admin (admin), or the last remaining administrator.

Bulk actions

Select rows with the per-row checkboxes (your own row isn't selectable) or the tri-state header checkbox, then act on the whole selection from the floating bar:

• In Active: Enable · Disable · Change role · Delete → Trash.
• In Trash: Restore.

Audit

Every user-lifecycle change is recorded in the user lifecycle audit.