User Management

Manage platform users, roles, and admin invitations.

Route

/admin/users

Overview

The Users section provides tools for managing all platform users, from customers to administrators, including role management and admin invitations.

Tabs

Users Tab

Statistics

• Total Users - All registered users
• Admins - Administrator accounts
• Verified Users - Email-verified users

User List

View all users with:

• Name - User's full name
• Email - Email address
• Role - User role (Customer, Admin, Super Admin)
• Status - Account status
• Registered - Registration date
• Last Login - Last activity
• Actions - Manage user

Filters

• Role - Filter by user role
• Status - Active, inactive, suspended
• Verified - Email verification status
• Date Range - Registration date

Search

Search users by:

• Name
• Email address
• User ID

Admin Invitations Tab

Manage pending admin invitations:

• Email - Invited email address
• Role - Admin level being offered
• Invited By - Who sent the invitation
• Sent Date - When invitation was sent
• Status - Pending, accepted, expired
• Actions - Resend, revoke

User Roles

Role Types

• Customer - Regular platform user

  • Can enter competitions
  • Make purchases
  • View own orders
  • Update own profile

• Admin - Platform administrator

  • Access admin panel
  • Manage competitions
  • View all users
  • Process orders
  • Limited system settings access

• Super Admin - Full system access

  • All admin permissions
  • User role management
  • System configuration
  • Invite other admins
  • Access logs and audits

User Details

Click a user to view full details:

Account Information

• Full name
• Email address
• Phone number
• Date of birth
• Registration date
• Email verification status
• Account status

Order History

• All orders placed
• Total amount spent
• Average order value
• First purchase date
• Last purchase date

Competition Entries

• Competitions entered
• Total tickets purchased
• Wins
• Active entries

Account Activity

• Last login
• Login history
• IP addresses
• Device information
• Activity log

User Actions

Edit User Details

1. Click user from list
2. Click "Edit"
3. Update information:
   • Name
   • Email (sends verification)
   • Phone
   • Role (if authorized)
4. Save changes

Change User Role

1. View user details
2. Click "Change Role"
3. Select new role:
   • Customer
   • Admin
   • Super Admin
4. Confirm change
5. User notified of role change

Note: Only Super Admins can change user roles.

Activate/Deactivate Account

1. View user details
2. Click "Deactivate Account" or "Activate Account"
3. Confirm action
4. User notified of status change

Deactivated accounts:

• Cannot log in
• Cannot place orders
• Retain all data
• Can be reactivated

Suspend Account

1. View user details
2. Click "Suspend"
3. Enter suspension reason
4. Set duration (optional)
5. Confirm suspension

Suspended accounts:

• Temporarily disabled
• User sees suspension message
• Can be unsuspended
• Logs suspension in audit trail

Reset Password

1. View user details
2. Click "Reset Password"
3. Password reset email sent
4. User receives reset link

Delete User

1. View user details
2. Click "Delete User"
3. Confirm deletion (irreversible)
4. Choose data handling:
   • Anonymize orders
   • Keep competition history
   • GDPR compliance

Note: Deleting users with active entries requires special handling.

Admin Invitations

Sending Invitations

1. Navigate to Admin Invitations tab
2. Click "Invite Admin"
3. Enter email address
4. Select admin level:
   • Admin
   • Super Admin
5. Add personal message (optional)
6. Send invitation

Invitation email includes:

• Invitation link
• Role being offered
• Who invited them
• Expiry date (7 days)

Managing Invitations

Resend Invitation

1. Find invitation in list
2. Click "Resend"
3. New email sent
4. Expiry date extended

Revoke Invitation

1. Find invitation in list
2. Click "Revoke"
3. Confirm revocation
4. Invitation link invalidated

Invitation Status

• Pending - Not yet accepted
• Accepted - User created admin account
• Expired - Invitation expired (7 days)
• Revoked - Invitation cancelled

User Activity Logs

View user activity:

• Login attempts
• Password changes
• Profile updates
• Orders placed
• Competition entries
• Admin actions (if admin)

Export activity logs for:

• Security audits
• Compliance
• Support investigations

Bulk Actions

Export Users

1. Apply filters
2. Click "Export"
3. Choose format (CSV, Excel)
4. Download file

Use cases:

• Marketing lists
• Compliance reports
• Data analysis
• Backup

Bulk Email

1. Select users or apply filters
2. Click "Send Email"
3. Compose message
4. Send to filtered users

Security Features

Two-Factor Authentication

Monitor 2FA adoption:

• Users with 2FA enabled
• Encourage adoption
• Enforce for admins

Suspicious Activity

Flag suspicious accounts:

• Multiple failed logins
• IP address changes
• Unusual spending patterns
• Account sharing indicators

Password Policy

Enforce password requirements:

• Minimum length
• Complexity rules
• Expiry period (admins)
• Login attempt limits

Tips

• Review new user registrations regularly
• Monitor admin accounts closely
• Use role-based access appropriately
• Keep admin invitations current
• Export user data periodically
• Track suspended accounts
• Audit admin actions
• Encourage 2FA for all admins
• Document role changes
• Respond to user requests promptly