User Management
Control who can access the bot, manage user types, and configure login policies.
User Types
| Type | Access Level |
|---|---|
super_admin | Full access to all features, settings, and bot introspection tools |
admin | Full access to all features except super-admin-only tools |
user | Access governed by permission roles and tool defaults (read-only by default) |
How Users Are Created
Users are created automatically when they log in for the first time via Google OAuth. Their access depends on the security settings:
- Domain restriction — only users with emails matching
PRIMARY_DOMAIN(or additional allowed domains) can log in - Require approval — if enabled, new users must be approved by an admin before they can access the bot
- Allow all domains — disables domain restrictions entirely
Admin Panel
Go to Admin → Users to:
- View all registered users with their type and status
- Change user types (user / admin / super_admin)
- Approve or reject pending join requests
- Deactivate users
Login Configuration
Security settings are configured in the admin panel under the main settings area:
- Allowed email domains — comma-separated list of domains
- Require approval toggle — when enabled, new users see a "request sent" message
- Allow all domains toggle — overrides domain restrictions