5
Per-user permissions v2 — a targeted grant or removal of rights on top of the role. Auth & Security.
6
Sessions — the admin sees the number of active sessions; no details (device, IP). The only action is "end all".
Auth & Security.
7
User actions are critical — from
v2, before running one the admin confirms their password through the re-auth modal.
8
Password reset — the admin sends the user's email a link to set a new password; without SMTP, a fallback to a temporary password. Flow —
Password recovery.
9
Deactivation and deletion are two different actions. Deactivation reversibly closes sign-in; deletion irreversibly wipes the account and is available only to an Owner.
Auth & Security.
10
API keys — this user's keys; "Create key" opens the shared creation dialog. A secondary path is the full company-wide list in API Keys.