Users¶
The users area (Governance → Users) is the central place to find and manage the hub's accounts. It is built as a master–detail view: on the left a searchable, filtered list, on the right the details of the selected account with the matching actions.
Finding & filtering¶
Search by name or email and narrow the list using facets:
| Facet | Shows |
|---|---|
| All | All registered accounts |
| Admins | Accounts with hub-admin rights |
| Verified | Accounts with confirmed identity |
| Unverified | Accounts without confirmation |
| Disabled | Locked accounts (deliberately set apart, analogous to "archived") |
The detail panel shows a summary of the account — including whether it is a hub admin, and the person's space memberships.
Actions per account¶
Depending on the account's state, the detail panel offers these actions:
| Action | Effect |
|---|---|
| Verify / Unverify | Marks an account's identity as confirmed (or withdraws the confirmation). |
| Promote to admin / Revoke admin rights | Grants or revokes hub-admin rights — directly in locali, without a detour through Keycloak. |
| Disable / Enable | Locks an account (no more sign-in) or releases it again. |
Admin rights now in the app
Hub admins are no longer appointed only via Keycloak. Granting and revoking admin rights now happens directly in the users area. (The underlying identity is still managed by Keycloak as the identity provider.)
Protection against self-lockout¶
So that no one accidentally locks themselves out or leaves the hub without an admin, some actions are deliberately blocked:
- You cannot revoke your own admin rights and cannot disable yourself.
- The last remaining admin cannot be removed.
These rules are additionally enforced server-side — not only in the interface.
Fully deleting an account (GDPR)¶
No permanent deletion via this view
Fully deleting an account (e.g. in response to a GDPR deletion request) is handled by a separate process. Disabled accounts initially remain in the database. As the operator you carry the data-protection responsibility for these operations.