====== User Management ======

===== Overview =====

User accounts are managed in the **Admin → Users** section. Each user has a login record with a profile, security level, and optional API credentials.

===== Creating a User =====

  - Navigate to **Admin → Users → Create User**
  - Enter: email address, display name, and a temporary password
  - Set the security level (see below)
  - The user receives a welcome email with a link to set their password

===== Security Levels =====

^ Level ^ Role ^ Access ^
| 1 | Standard User | Can join organisations and take courses |
| 2 | Educator | Can create lessons, manage classes, and run reports |
| 3 | Administrator | Full platform access — all admin functions |

===== Editing a User =====

  - Navigate to **Admin → Users → Search**
  - Search by name or email address
  - Click the user to open their profile
  - Update name, email, password, or security level

===== Deactivating a User =====

Users cannot be deleted (to preserve audit history). To deactivate:
  - Open the user profile
  - Set status to **Inactive**
  - The user can no longer log in but their records are preserved

===== API Credentials =====

To allow a user to access the [[developer:api|Collection API]]:
  - Open the user profile
  - Generate or set an **API User ID** and **API Key**
  - For admin-level API access (bypasses RLS), tick **API Admin**

===== Bulk Import =====

To create multiple users at once, use [[admin:import|Bulk User Import]] via CSV upload.

===== Password Reset =====

  - Open the user profile → **Send Password Reset Email**
  - The user receives a time-limited reset link
  - Admins can also set a password directly from the profile page