Help Guides
Managing users and their access
You need users.list to see people and users.manage to change accounts. Turning app access on and off needs entitlements.manage. App owners can do this for their own apps.
Find someone
Users searches by name, email or usr_ ID. Paste an exact ID to jump straight to that person. Filter by status, by app, or by role (for example, everyone holding support).
Invite someone
Invite user sends an email with a link that works once and expires after 7 days. Until they accept, the person shows as Invited, and you can resend the invitation from their page.
Two questions decide access
- Is the app on for this person? That's their access (an entitlement): Active, Turned off, Expired, Revoked or Scheduled.
- If it's on, what can they do? That's their roles, which grant permissions inside the app.
They're separate on purpose. Turning access off pauses it without touching roles, profile or settings, so turning it back on restores exactly what they had.
Turn access off (or on)
Open the person → Access, and flip the switch next to the app. Confirm, add a reason if you like, and they're out immediately: every Substratal app must end the session as soon as access is turned off.
- Turn off is reversible. Use it for billing disputes, investigations, or "not right now".
- Revoke is permanent. Use it when the purchase itself is gone (refunds, chargebacks). Coming back means a new grant.
- Access that comes from Substratal itself (a free app, or the Standard plan) can only be turned off and back on, never edited or revoked.
"Why can (or can't) they get in?"
A person can have several paths to the same app: their own purchase or trial, a grant from an organization's seats, the free tier, or Standard. Why? on Access check shows every path, which one is winning, and the permissions they end up with.
Suspend an account
Suspend user signs them out everywhere and blocks sign-in, without deleting anything. Reactivate to undo. The platform owner's own account is protected and can't be suspended.
End someone's sessions
From the person's Sessions tab, end one session or all of them. Use this when a device is lost or an account may be compromised.
Screens in this guide
USR-01 · Users USR-02 · Invite user USR-03 · User — Overview USR-04 · User — Sessions USR-05 · Suspend user ACX-01 · User — Access ACX-02 · Grant access ACX-03 · Turn off / edit access ACX-04 · Access check (Why?) ACX-05 · Access (all)