Dashboard settings
Open Project settings → Authentication in the ElmapiCMS admin.
You need the access_auth_settings permission to open this area.
What you can manage
| Area | What you do |
|---|---|
| Overview | See auth stats for the project |
| Users | Create users, suspend users, mark email verified, resend verification |
| Sessions | Review and revoke sessions |
| API keys | Review end-user uak_… keys |
| Audit log | Review auth events |
| Email verification | Require verified email and edit verification email copy |
Create a user in the dashboard
- Open Authentication → Users.
- Create the user with email and password.
- Dashboard-created users are verified automatically.
Use this for support cases or seeded accounts. Most products use self-service signup from the app.
Suspend a user
- Open the user in Authentication → Users.
- Suspend the user.
The user cannot sign in. Active access tokens stop working.
Revoke sessions
- Open Authentication → Sessions.
- Revoke one session or clear sessions for a user.
Use this when a device is lost or a session looks wrong.
Email verification policy
If you require verified email:
- Unverified users cannot sign in
- Unverified users cannot refresh
- Signup can return
email_verification_required
Self-service signup always sends a verification email, even when the require-verified policy is off.
See Email verification.
Permission
| Permission | Needed for |
|---|---|
access_auth_settings | Open Authentication settings, manage users, sessions, keys, and verification |
Related docs
- Full product guide: Authentication
- Env defaults: Configuration
- Permissions list: Understanding Permissions