Appearance
User Management Module
The User Management module allows you to manage users, roles, and permissions in your Nexora installation. This guide covers all user management features.
Table of Contents
- Overview
- Accessing User Management
- User List
- Creating Users
- Editing Users
- User Roles
- Permissions Management
- Bulk Operations
- User Teams/Workspaces
- User Activity
Overview
Features
- ✅ Create and manage user accounts
- ✅ Role-based access control (RBAC)
- ✅ Permission management
- ✅ User teams/workspaces
- ✅ User activity tracking
- ✅ Bulk user operations
- ✅ User profile management
- ✅ Password management
Admin Routes
- User List:
/admin/users - Create User:
/admin/users/create - Edit User:
/admin/users/{id}/edit - Roles:
/admin/roles
Permissions
- View Users:
view userspermission - Create Users:
create userspermission - Edit Users:
edit userspermission - Delete Users:
delete userspermission - Manage Roles:
manage roles & permissionspermission
Accessing User Management
From Admin Panel
- Log in to admin panel
- Navigate to Core → Users
- Or go directly to:
/admin/users
User Management Sections
- Users: User list and management
- Roles: Role management
- Permissions: Permission assignments
User List
Viewing Users
Access at: /admin/users
List Features
Search
- Search by name, email, username
- Real-time search results
- Filters as you type
Filters
- Role: Filter by user role
- Status: Active/Inactive
- Date: Registration date range
- Team: Filter by team/workspace
Sorting
- By Name (A-Z, Z-A)
- By Email
- By Registration Date
- By Last Login
Display Options
- Items per page (10, 25, 50, 100)
- Grid or list view
- Column visibility
User Information Displayed
- Name: User's full name
- Email: Email address
- Role: Assigned role(s)
- Status: Active/Inactive
- Last Login: Last login timestamp
- Registered: Registration date
Creating Users
Step 1: Access Create Page
- Go to Users → Create New User
- Or navigate to:
/admin/users/create
Step 2: Basic Information
First Name
- User's first name
- Required field
- Example:
John
Last Name
- User's last name
- Required field
- Example:
Doe
Email Address
- Required: Must be unique
- Used for login
- Used for notifications
- Format:
user@example.com
Username (Optional)
- Alternative login identifier
- Must be unique if provided
- Alphanumeric and underscores only
Step 3: Password
Set Password
- Minimum: 8 characters
- Recommended: 12+ characters
- Include:
- Uppercase letters
- Lowercase letters
- Numbers
- Special characters
Password Options
- Set Password: Enter password manually
- Generate Password: Auto-generate strong password
- Send Password Reset: User sets password via email
Step 4: Role Assignment
Select Role
- Choose from available roles
- Can assign multiple roles
- Primary role determines main permissions
Available Roles
- Admin: Full system access
- Editor: Content management
- Author: Content creation
- Contributor: Limited content creation
- Subscriber: Basic access
- Custom Roles: User-defined roles
Step 5: Additional Settings
Status
- Active: User can log in
- Inactive: Account disabled
Email Verification
- Verified: Email confirmed
- Unverified: Requires verification
Two-Factor Authentication
- Enable 2FA for user
- Requires setup by user
Step 6: Team/Workspace Assignment
Assign to Team
- Select team/workspace
- User gains team permissions
- Access to team resources
Step 7: Save User
- Create User: Save and create account
- Create & Add Another: Save and create another
- Create & Edit: Save and continue editing
Editing Users
Accessing Edit Page
- Go to user list
- Click Edit on user
- Or navigate to:
/admin/users/{id}/edit
Editable Information
Personal Information
- First Name
- Last Name
- Email (with verification)
- Username
- Phone Number
- Address
Account Settings
- Change Password:
- Enter new password
- Confirm password
- Save changes
Role Management
- Change Roles:
- Add roles
- Remove roles
- Set primary role
Status Management
- Activate/Deactivate:
- Toggle user status
- Inactive users cannot log in
Team Assignment
- Change Team:
- Assign to different team
- Remove from team
- Change team role
Updating Own Profile
Users can update their own profile:
- Access at:
/admin/users/update-own - Can change:
- Name
- Password
- Profile picture
- Personal preferences
User Roles
Accessing Roles
- Go to Users → Roles
- Or navigate to:
/admin/roles
Role Management
Creating a Role
- Click Create New Role
- Enter:
- Name: Role name (e.g., "Content Manager")
- Slug: URL-friendly version (auto-generated)
- Description: Role description
- Click Save
Role Features
- Clone Role: Duplicate existing role
- Bulk Assign: Assign role to multiple users
- Statistics: View role usage stats
Default Roles
Administrator
- Full system access
- All permissions
- Can manage everything
Editor
- Content management
- Can publish content
- Can manage media
- Limited settings access
Author
- Create and edit own content
- Cannot publish (requires approval)
- Limited media access
Contributor
- Create content
- Cannot publish
- Very limited access
Subscriber
- Basic access
- View content
- Comment on posts
Custom Roles
Create roles with specific permissions:
- Create role
- Assign permissions
- Assign to users
Permissions Management
Understanding Permissions
Permissions control what users can do:
- View: Can see content
- Create: Can create new content
- Edit: Can modify content
- Delete: Can remove content
- Manage: Full control over module
Permission Structure
Module Permissions
view posts- View blog postscreate posts- Create postsedit posts- Edit postsdelete posts- Delete postsmanage posts- Full post management
System Permissions
access admin panel- Access admin areamanage settings- Change settingsmanage users- User managementmanage roles & permissions- Role management
Assigning Permissions
To Role
- Go to Roles → Edit role
- Scroll to Permissions
- Check permissions to grant
- Uncheck to revoke
- Click Save
To User
- Edit user
- Go to Permissions section
- Assign permissions directly
- User-specific permissions override role permissions
Permission Hierarchy
- User-Specific: Highest priority
- Role Permissions: Default permissions
- Module Defaults: Base permissions
Bulk Operations
Bulk Actions Available
Bulk Delete
- Select multiple users (checkboxes)
- Click Bulk Actions dropdown
- Select Delete
- Confirm deletion
- All selected users are deleted
Warning: Cannot be undone. Users' content may be affected.
Bulk Role Assignment
- Select users
- Click Bulk Actions
- Select Assign Role
- Choose role
- All selected users get role
Bulk Status Change
- Select users
- Click Bulk Actions
- Select Change Status
- Choose Active/Inactive
- All selected users updated
Selecting Users
- Select All: Checkbox in header
- Select Page: Select all on current page
- Individual: Check individual users
User Teams/Workspaces
Overview
Teams allow grouping users for:
- Collaborative projects
- Resource sharing
- Team-specific permissions
- Organization structure
Team Management
Creating Teams
- Go to Users → Teams
- Click Create Team
- Enter:
- Team name
- Description
- Team settings
- Click Save
Assigning Users to Teams
- Edit user
- Go to Teams section
- Select team(s)
- Choose team role:
- Owner: Full team control
- Admin: Team management
- Member: Basic team access
- Save
Team Features
- Shared Resources: Team members share access
- Team Projects: Collaborative projects
- Team Permissions: Team-specific access
- Team Communication: Team messaging
User Activity
Activity Tracking
System tracks:
- Login/logout times
- Content created/edited
- Settings changed
- Actions performed
Viewing Activity
- Go to user profile
- Click Activity tab
- View:
- Recent actions
- Login history
- Content changes
- System events
Activity Log
Admin can view all user activity:
- Access at: Activity log (if available)
- Filter by user, date, action
- Export activity reports
Password Management
Resetting Passwords
Admin Reset
- Edit user
- Go to Password section
- Enter new password
- Confirm password
- Save
User Self-Reset
- User clicks "Forgot Password"
- Receives reset email
- Clicks reset link
- Sets new password
Password Requirements
- Minimum: 8 characters
- Recommended: 12+ characters
- Complexity: Mix of letters, numbers, symbols
- History: Cannot reuse recent passwords (if enabled)
Password Security
- Passwords are encrypted
- Never stored in plain text
- Reset links expire
- Failed login attempts tracked
Best Practices
User Creation
Verify Email:
- Use valid email addresses
- Verify email ownership
- Keep emails updated
Assign Appropriate Roles:
- Follow principle of least privilege
- Only grant necessary permissions
- Review role assignments regularly
Set Strong Passwords:
- Enforce password policy
- Encourage password managers
- Enable 2FA when possible
Role Management
Create Specific Roles:
- Define clear role purposes
- Assign relevant permissions
- Document role responsibilities
Regular Audits:
- Review user roles periodically
- Remove unnecessary permissions
- Update roles as needed
Use Teams:
- Organize users into teams
- Simplify permission management
- Improve collaboration
Security
Monitor Activity:
- Review login logs
- Check for suspicious activity
- Investigate anomalies
Regular Cleanup:
- Remove inactive users
- Deactivate unused accounts
- Archive old accounts
Access Control:
- Limit admin access
- Use role-based permissions
- Review permissions regularly
Troubleshooting
User Cannot Log In
Solutions:
- Check user status (must be Active)
- Verify email is correct
- Check password reset
- Verify email verification status
- Check for account lockout
Permission Issues
Solutions:
- Verify role permissions
- Check user-specific permissions
- Clear permission cache
- Reassign role if needed
Email Not Sending
Solutions:
- Check email settings
- Verify SMTP configuration
- Check spam folder
- Test email functionality
Related Documentation
Last Updated: [Date will be updated during final review]
