Skip to Content
Using metamorphOSUsers

Users

The Users section - the Identity Hub - is where you manage who can use the workspace and what they can do. It covers the people, the access they hold, and the non-human actors (applications) that talk to metamorphOS through the API.

Users is an admin area.

Four folds

The Identity Hub is organised into four folds, each with a live count:

  • Users - the people (and applications and guests) in the workspace.
  • Authorities - named permissions, like Admin, that grant access.
  • Groups - collections of users for assignment and routing.
  • Organizations - organizational units users belong to.

Together these are how access is expressed: a user holds authorities, belongs to groups and organizations, and processes use those to decide who may start, view, or act on what. See Roles, Users, Authorizations for the model.

Managing users

The Users fold lists each person with their Authorities, Groups, and Organizations (each filterable). Add User invites someone; a person who hasn’t accepted yet shows a pending chip.

Open a user to manage them: edit the authorities, groups, and organizations they hold, view their history and activity, Reset Password, or Deactivate the account.

Applications and guests

The same fold has two more sections:

  • Applications - programmatic actors. An application has an API key (a secret you can copy and regenerate) and acts on behalf of an integration that talks to metamorphOS without a person at the keyboard. Use Register Application to create one.
  • Guests - external actors. Hidden by default; flip Show to see them. You can Invite as member to promote a guest into a full user.

Tip

An application’s API key is how outside systems authenticate to metamorphOS - for example to call its API or deliver to a webhook. Treat it like any secret; regenerate it if it’s exposed. See Inbound Webhooks.

Authorities, groups, organizations

The other three folds manage the access primitives themselves. Each lists its entries and the holding actors (who has it), with an Add button to create a new one. Grant the Admin authority sparingly - see The Admin Role.

Last updated on
DatastoresIntegrations