Users
The Users tab of Users & access is the central place for managing every user in your workspace — viewing their status, changing their Access Level or Role, enabling or disabling accounts, and running bulk actions on multiple users at once.
Required permission
Viewing the list requires Tenant Admin access. Making changes (changing roles, disabling users, bulk actions) also requires Tenant Admin. Users at lower access levels do not see this tab.
The user table
Each row represents one user. The columns are:
| Column | What it shows |
|---|---|
| User | Avatar, display name, and email. If the user has a pending email change in progress, the new address is shown alongside the current one. Anonymized users display placeholder text. |
| Access Level | Inline dropdown — Tenant Admin, Project Admin, or Regular User. Selecting a new value saves immediately. |
| Role | Inline dropdown — lists all roles configured in your workspace. Selecting a new value saves immediately. |
| Status | Reads Active or Disabled. It is a label, not a control — disable and re-enable a user from the row’s actions menu. |
| Actions | An actions menu for that row. See Row actions. |
Click any column header (except Actions) to sort by that column. Click again to reverse the sort direction.
Search and filtering
- Search box — filters the list by name or email as you type.
- Show forgotten users — when on, users who have been forgotten (anonymized) are included in the list. Those rows are read-only and cannot be selected or modified.
Changing Access Level and Role
Both settings can be changed directly from the table row — no need to open the edit dialog. Click the value in the Access Level or Role column and pick a new one; the Role list is searchable, because it grows with your workspace. The change is applied immediately. Your own Access Level is not editable here.
"What does each Access Level actually allow?" See Access Levels for the full breakdown of what Tenant Admin, Project Admin, and Regular User can do. For what a Role controls, see Roles.
Row actions
Every row carries an actions menu at its right-hand end:
| Action | What it does |
|---|---|
| Edit user… | Opens the edit dialog. See Editing a user. |
| Change email… | Opens the same edit dialog, to change the address on the account. See Changing an email address. |
| Force logout | Ends every active session for that user immediately. |
| Disable user / Enable user | Stops them logging in, or lets them back in. It does not delete their data or remove them from projects, and it is reversible. |
| Forget user… | Anonymizes and permanently deactivates the account. Irreversible — see the callout below. |
None of these apply to your own account On your own row, everything below Change email is unavailable and reads Not on yourself. This is intentional — it prevents accidental self-lockout.
Editing a user
Edit user… opens a dialog where you can update the user’s Name, Email, Access level and Role. Nothing is written until you choose Save changes.
Changing an email address
Both Edit user… and Change email… open the same dialog. Type a new address into its Email field and an Apply immediately switch appears. It decides which of two things happens when you save:
- Off (the default) — a verification link is sent to the new address, and the change applies only once the user clicks it. Until then the account keeps its current address, and the pending one is shown beside it in the Users list.
- On — the address changes on save. The user is signed out and has to sign in again with the new address.
Either way, a linked Google or GitHub identity that does not match the new address is unlinked.
Bulk actions
Select users with the checkboxes on the left. The Select All checkbox at the top selects every eligible user in the current filtered view. You cannot select your own account or anonymized users.
Once at least one user is selected, the bulk action buttons appear:
| Action | What it does |
|---|---|
| Enable | Re-activates all selected disabled users. |
| Disable | Deactivates all selected users — they can no longer log in. |
| Force logout | Immediately terminates all active sessions for the selected users. |
| Forget… | Anonymizes and permanently deactivates the selected users. Irreversible. |
"Forget" is permanent
This action replaces the user's personal data — name, email, avatar — with anonymized placeholders and permanently deactivates the account. It cannot be undone, so the confirmation asks you to type FORGET before it will proceed. Use this only for GDPR or data deletion requests where a user's personal data must be fully erased. If you only need to stop someone signing in, disable them instead — that keeps their name readable in run and case history.
"Why can't I check the box next to my own name?" The checkbox is intentionally disabled for the currently signed-in user. This prevents accidental self-lockout via bulk disable or forget. To update your own account details, use your own Profile page.