{% extends "documentation/base.html" %}

{% block doc_content %}
<h1>User Management</h1>

<p class="lead">
  Admins can create users, change roles, reset passwords, and remove accounts from Settings.
</p>

<div class="doc-callout doc-callout-info">
  <strong>Where:</strong><br>
  Open <a href="{{ url_for('main.settings', section='users') }}"><strong>Settings -> Users</strong></a>.
</div>

<h2>Available Roles</h2>

<ul>
  <li><strong>Admin</strong></li>
  <li><strong>Operator</strong></li>
  <li><strong>Reporter</strong></li>
  <li><strong>Viewer</strong></li>
</ul>

<h2>Create User</h2>

<ol>
  <li>Enter <strong>Username</strong>.</li>
  <li>Select one or more roles (default fallback is Viewer).</li>
  <li>Set initial password.</li>
  <li>Click <strong>Create</strong>.</li>
</ol>

<h2>Update Roles</h2>

<ul>
  <li>Role changes are saved per user via the inline <strong>Save</strong> button.</li>
  <li>At least one role is always enforced (Viewer fallback).</li>
  <li>The last remaining admin cannot lose Admin role.</li>
</ul>

<h2>Password Reset</h2>

<ul>
  <li>Use the per-user reset field in the Actions column.</li>
  <li>New password is required.</li>
</ul>

<h2>Delete User</h2>

<ul>
  <li>Use the per-user <strong>Delete</strong> action.</li>
  <li>The last remaining admin account cannot be deleted.</li>
</ul>

<h2>Audit Logging</h2>

<p>User creation, role updates, password resets, and deletions are written to the admin audit log.</p>

<h2>Related Pages</h2>

<ul>
  <li><a href="{{ url_for('documentation.page', section='users', page='users-and-roles') }}">Users & Roles</a></li>
  <li><a href="{{ url_for('documentation.page', section='users', page='profile-settings') }}">Profile Settings</a></li>
</ul>
{% endblock %}