Access Control & Users
Manage owners, staff, roles and secure business access — what exists is shown; what doesn't says so.
Total Users
…
Invitations
Loading…Pending
Loading…Accepted
Loading…Devices
Loading…Security Score
no score is computed
Users
Permissions are real and enforced on every request — deny beats allow, validity windows, tenant scope — and the audit trail records the permission used for each event. The users register, roles (with members and grant sets) and permission catalogue below are live reads and writes, each gated on its own permission: a denied call says so rather than rendering nothing. Still absent: per-user role names on the register.
| User | Status | Role | Devices | 2FA | Last sign-in | Actions |
|---|---|---|---|---|---|---|
Loading… | ||||||
Invitations — accounts not yet created
Loading…
Role grants
Loading…
AI Access Analysis
Checking assistant status… No access-pattern analysis is computed — the checklist below is real state from the same queries this page already runs, not a model's judgement.
- Two-factor authentication (this account)…
- Recovery codes remaining…
- Devices with live sessions…
- Permissions exercised (audit trail)…
- Actors recorded (audit trail)…
Permission Overview
Loading…
Distinct permissions exercised per module, from the audit trail. Per-role grants are now readable — this chart deliberately plots what was exercised, not what is granted.
Access Control Insights
- Unauthorised-attempt counting is not tracked — there is nothing real to put here.
- Role grant sets are readable and editable — the Roles tab and the grant editor below write /roles/:id/permissions, audited.
- Enforcement is real and server-side on every request — deny beats allow; the audit trail records the permission used for each event.
Recent Access Activities
Loading…