6.1 User Management

February 16th, 2026

RBAC required: bear: User administration

BEAR admin users are created and managed according to RBAC1 to restrict them to specific admin tasks for specific applications.

Each application has its own specific RBAC roles which are made available to BEAR for purpose of granular permission management for each user.

There is one master root user which has access to everything. This user cannot be deleted but ideally should not be used for day-to-day administration tasks. Upon deployment, it is best practice to create at least two specific named administrator users and only use the master root account if all other users with the bear: Root access role are incapacitated.

There is no limit to the number of admin users that can be created.

• Creating a New User Account
• Viewing All User Accounts
• Modifying a User Account Profile
• Locking/Unlocking a User Account
• Resetting a Password
• Deleting a User Account

6.1.1 Creating a New User Account

1. Select the Users tool group from the Admin Tool menu and then select the Add tab.

2. Provide a unique Username. Email, and use the [CTRL] key while selecting Roles to select all the required RBAC roles.

You can easily create a user with the same RBAC roles as another user by using the Copy Roles field and inputting the name of a user you wish to use as a template.

3. The Password fields are optional. Although a password is required, if you leave the fields blank then BEAR will randomly generate a password and send it to the user. There are no special rules for passwords.
4. Decide if you want the user to be created in the Locked state to prevent login until manually unlocked later.
5. Finally click Register User to create the user.

6.1.2 Viewing All User Accounts

To view all users and their full profile at once, simply select the Users tool group from the Admin Tool menu and then select the View tab.

6.1.3 Modifying a User Account Profile

1. Select the Users tool group from the Admin Tool menu and then select the Edit tab.

2. Type in the Username of the user you wish to edit and click Load. The profiles will then be populated. with their email address, RBAC roles and locked status.

3. Update the Email address, Roles and Locked status as required.
4. Click Update to apply the changes to the user.

New account settings will only take effect when the user next logs in. Current sessions will not be affected or interrupted.

6.1.4 Locking/Unlocking a User Account

User accounts should be locked or unlocked using the steps described in Modifying a User Account.

6.1.5 Resetting a Password

A password reset involves an automatically generated password being sent to the user's registered address. They should be encouraged to change this again after they log in.

1. Select the Users tool group from the Admin Tool menu and then select the Edit tab.

2. Type in the Username of the user you wish to edit and click Load. The profiles will then be populated. with their email address, RBAC roles and locked status.

3. Tick the Reset Password box.
4. Click Update to reset the password.

6.1.6 Deleting a User Account

1. Select the Users tool group from the Admin Tool menu and then select the Delete tab.

2. Tick the users you want to delete.

3. Click Delete to remove the user.

There is no confirmation prompt for deleting users. Be careful to review your selection before deleting.