User Management

The User Management module controls who can access your OPBX organization and what they can do. Each user belongs to exactly one organization and has one of five roles.

Purpose

Use this module to:

• Create and deactivate user accounts
• Assign roles and permissions
• Reset user passwords
• Manage user profile information
• Control access to PBX features

Role Hierarchy

OPBX uses five roles:

Role	Level	Capabilities
Owner	1	Full access; can manage other owners and system-wide settings
PBX Admin	2	Manage extensions, routing, users (except owners and other PBX admins)
Supervisor	3	Read-only monitoring scoped to assigned users/ring groups; coach live calls; use the Web Phone
PBX User	3	View assigned resources; update own extension settings
Reporter	4	Read-only access to call logs, reports, and dashboards

Role Assignment

Only Owners can assign the Owner role. PBX Admins cannot create or modify other PBX Admins or Owners. See Supervisors for how supervisor assignments scope what a supervisor can see and coach.

Permissions

Action	Owner	PBX Admin	PBX User	Reporter
View users	Yes	Yes	Self only	No
Create users	Yes	Yes (non-owner)	No	No
Update users	Yes	Yes (non-owner, non-admin)	Self only	No
Delete users	Yes	PBX User / Reporter only	No	No
Update role	Yes (not self)	No	No	No
Update password	Others only	PBX User / Reporter only	No	No

UI Workflow

Create a User

1. Navigate to Users in the sidebar
2. Click Add User
3. Enter the user's name and email
4. Select a role
5. Optionally assign an extension
6. Click Save

The new user receives an email invitation if transactional email is configured.

Deactivate a User

1. Find the user in the Users list
2. Click Edit
3. Change Status to Inactive
4. Save the change

Inactive users cannot log in but their history remains available.

Reset a Password

1. Open the user details
2. Click Reset Password
3. Enter and confirm the new password
4. Save

Password changes made by an administrator force the user to log in again.

Key Data Fields

users Table

Column	Type	Notes
id	bigint	Primary key
organization_id	FK	Tenant scope
name	string	Display name
email	string	Globally unique
password	string	Hashed with bcrypt
role	enum	owner, pbx_admin, supervisor, pbx_user, reporter
status	enum	active, inactive
is_platform_manager	boolean	Cross-tenant admin flag

Related API Endpoints

Method	Endpoint	Purpose
GET	/v1/users	List users
POST	/v1/users	Create user
GET	/v1/users/{user}	Show user
PUT	/v1/users/{user}	Update user
DELETE	/v1/users/{user}	Delete user
PATCH	/v1/users/{user}/password	Update user password

See the OPBX REST API reference for full request/response schemas.

Related Modules

• Extensions — Assign extensions to users
• Settings — Organization-wide configuration