Users and Permissions¶

Control who can access FilaOps and what they can do.

What You'll Learn¶

• How to add and manage team members
• The difference between Admin and Operator roles
• How to reset passwords and deactivate accounts
• How to run a security audit on your installation

Prerequisites¶

• Admin access to FilaOps (Operators cannot manage users)

Understanding Roles¶

FilaOps has two user roles:

Operators can view and work with day-to-day operational features but cannot access administration pages like settings, user management, or accounting.

Managing Team Members¶

Navigate to Settings > Team Members in the sidebar.

Overview¶

The page shows summary cards at the top:

• Total Active — Number of currently active users
• Admins — Count of users with Admin role
• Operators — Count of users with Operator role
• Inactive — Count of deactivated accounts

Finding Users¶

Use the controls above the table to find specific users:

• Search — Type a name or email address to filter the list
• Role filter — Select All Roles, Admin, or Operator to filter by role
• Show Inactive — Check this box to include deactivated accounts in the list

The User Table¶

Adding a Team Member¶

Step 1. Click + Add Member.

Step 2. Fill in the required fields:

Step 3. Click Create to save.

Share the email and temporary password with your new team member so they can sign in.

Editing a Team Member¶

Step 1. Find the user in the table and click the Edit (pencil) button.

Step 2. Update any fields — email, name, role, or status.

Step 3. Click Save Changes.

Resetting a Password¶

If a team member forgets their password or you need to force a password change:

Step 1. Find the user in the table and click the Reset Password button.

Step 2. Enter a new password (minimum 8 characters), or click Generate random password to create a secure 12-character password automatically.

Step 3. Click Reset Password to confirm.

Step 4. Share the new password with the user through a secure channel.

Deactivating and Reactivating Users¶

Deactivating¶

When someone leaves your team or no longer needs access:

Step 1. Find the user in the table.

Step 2. Click the Deactivate button.

The user's status changes to Inactive and they can no longer sign in. Their account and history are preserved — deactivation is not deletion.

Reactivating¶

To restore a previously deactivated account:

Step 1. Check Show Inactive to reveal deactivated accounts.

Step 2. Find the user and click Reactivate.

The user's status returns to Active and they can sign in again with their existing password.

Security Audit¶

Navigate to Settings > Security in the sidebar. The security audit scans your FilaOps installation and flags potential configuration issues.

Running an Audit¶

The audit runs automatically when you open the page. Click Refresh to re-run it at any time.

Reading the Results¶

The top of the page shows an overall status:

Below the status, summary cards show the count of Passed, Warning, and Failed checks.

Check Categories¶

Checks are organized by severity:

• Critical (red) — Security issues that should be fixed immediately, such as using default passwords or missing HTTPS
• Warning (yellow) — Improvements recommended, such as enabling rate limiting or configuring backups
• Informational (blue) — Status information that doesn't require action

Each check shows:

• Name — What was checked
• Status — Pass, Fail, or Warning
• Message — Explanation of the result
• Remediation — For failed checks, a Fix This button with instructions on how to resolve the issue

Common Security Checks¶

Exporting the Report¶

Click Export Report to download the full audit results as a JSON file. This is useful for compliance documentation or sharing with your IT team.

Tips and Best Practices¶

• Change the default admin password immediately — The security audit will flag this if you haven't. Use a strong, unique password.
• Use individual accounts — Don't share login credentials between team members. Each person should have their own account for accountability and audit trails.
• Review the security audit monthly — Run the audit after any system changes (updates, new server configuration, etc.) to catch new issues.
• Keep at least two Admin accounts — If your primary admin forgets their password, a second admin can reset it. A single admin account is a single point of failure.
• Deactivate, don't delete — When someone leaves, deactivate their account. This preserves their activity history in your system.

What's Next?¶

• System Settings — configure company information, tax rates, and business hours
• Installation and Setup — server configuration that affects security checks
• Your First Day — initial setup including creating your first admin account

Quick Reference¶