Users
Administrators manage accounts, roles, passwords, and deletion in Settings → Users.
Accounts and Sessions
Create accounts with username, role, and an eight-character minimum password. In Edit, blank passwords preserve the current value. Password/role changes revoke existing sessions; deletion invalidates old tokens. Self-deletion and deleting/demoting the last admin are blocked.
The account menu changes your password, replacing this token and revoking other sessions. Logout revokes the current token.
Roles
| Role | Access |
|---|---|
admin | All operations: users, announcements, audit, power, integration credentials |
operator | Monitoring, container/SDK actions, switch configuration, BMC console, host/service logs, storage provisioning |
viewer | Monitoring and connected dashboards; no host/service logs, BMC console, or privileged actions |
UI and API enforce roles: forbidden requests return 403; missing/revoked sessions return 401. Create a named admin before retiring the default account. Individual accounts identify actors in Audit Log. Dashboard credentials/roles are separate from agent node tokens.