Users
Manage users in Floprints — invite team members, assign admin or member roles, and suspend accounts without losing history.
Roles
| Role | Capabilities |
|---|---|
| admin | Full management surface: users, groups, providers, tools, audit log, system settings |
| member | Compose and run workflows within granted provider access; manage own API keys |
Inviting users
Admins invite users by email (Admin → Users → Invite). Invites are token-gated:
- User receives email with invite link
- User clicks link and explicitly accepts (required — email scanners must not auto-consume tokens)
- User sets password and joins the instance
SMTP must be configured (SMTP_* env vars) for invite delivery.
First admin
On a fresh install, visit /auth/setup to create the first admin account before any other user can sign in.
Suspending users
Suspended users cannot sign in or use API keys, but their usage history and audit records are preserved.
Authentication
- Email + password with scrypt hashing (
node:crypto) - Server-side sessions backing a management-surface cookie
- API keys for programmatic access (separate from session auth)