Complete managed account lifecycle

2026-08-11 07:49:53 +02:00
parent 34507ffa17
commit 5e9dae02c7
33 changed files with 1224 additions and 449 deletions
@@ -354,8 +354,11 @@ Routes are classified into three tiers:

 ### 7.3 User Management

-Only administrators can list, add, update, or remove accounts. The final
-administrator cannot be removed or demoted.
+Every authenticated account gets a Settings > Account tab for changing its own
+password. Only administrators get Settings > Users, where accounts can be
+created, enabled/disabled, assigned multiple roles, given a new password, or
+removed. The final enabled administrator cannot be disabled, removed, or
+demoted. Account security changes revoke every active session for that account.

 ---