Users and Roles
Users are the operators who sign in to the Product Manager console. Each user holds one role, and the role decides which pages appear in the navigation and which actions the API accepts.
Roles
| Permission area | Super Admin | Tenant Admin | Tenant User |
|---|---|---|---|
| Dashboard | Read | Read | Read |
| Tenants | Full | Read | — |
| Products | Full | Read | Read |
| Plans | Full | Read | Read |
| Licenses | Full, including lifecycle actions | Read, update | Read |
| License Keys | Read, generate, revoke | Read | Read |
| Clients | Full | Full | Read |
| Users | Full | Read | — |
| Audit Logs | Read | — | — |
| Settings | Read, update | — | — |
- Super Admin — Platform operators. The only role that can create tenants, products, plans, and users, change licence status, generate or revoke keys, read the audit log, and change settings.
- Tenant Admin — Account managers. Can update licences and manage clients, and read everything they need to support a customer.
- Tenant User — Read-only access for support and finance staff.
Managing Users
- Open Users
- Click Add User
- Enter the name and email, choose the Role, and set an initial password
- Save
From the user list a Super Admin can edit a user, Reset Password, deactivate, or delete the account. Users change their own password under Settings → Security.
Note: The Users page shows real operator names and addresses, so it is not pictured here.
Sign-In
The console signs in with email and password against the Product Manager's own user store by default. Deployments can instead delegate authentication to Keycloak, in which case the user's role is derived from the token's permissions and the account is provisioned on first sign-in.
Sessions expire after a period of inactivity. A warning appears shortly before the session ends so unsaved work can be completed.
Best Practices
- Grant Super Admin sparingly — It is the only role that can revoke licences and change email delivery settings.
- Use Tenant Admin for account teams — It covers day-to-day customer support without exposing platform settings.
- Deactivate leavers instead of deleting — Audit-log entries keep pointing at a real user record.