> ## Documentation Index
> Fetch the complete documentation index at: https://docs.areawp.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Users

> Create and manage all user accounts, roles, subscriptions, activity, and security settings.

<Info>
  **Path:** Administration → Users (`/users`) — Admin only
</Info>

## User Roles

| Role      | Access                                                |
| --------- | ----------------------------------------------------- |
| **Admin** | Full platform access — servers, settings, all clients |
| **User**  | Client access — own sites, billing, and support only  |

***

## User List

The Users page is rendered by **UsersTab** which shows all accounts with the ability to search, filter, and manage them.

**Per-user quick actions:**

* View full profile
* Reset password
* Impersonate (log in as that user)
* Change role
* Suspend / Activate
* Delete

***

## User Detail Page

Click any user to open their full profile with these sections:

<AccordionGroup>
  <Accordion title="Profile" icon="user">
    Name, email, phone, address, timezone. Admins can update any field.
  </Accordion>

  <Accordion title="Sites" icon="globe">
    All sites owned by this user. Admins can link/unlink sites and transfer ownership.
  </Accordion>

  <Accordion title="Subscription" icon="credit-card">
    Current plan, status, billing period, and expiry. Admins can manually change the plan, extend the period, or cancel.
  </Accordion>

  <Accordion title="Transactions" icon="receipt">
    Full payment history — invoice numbers, amounts, and payment methods.
  </Accordion>

  <Accordion title="Activity" icon="list">
    Recent actions taken by this user on the platform.
  </Accordion>

  <Accordion title="Security" icon="shield">
    Reset password, revoke all sessions, enable/disable 2FA, view login history and IP addresses.
  </Accordion>
</AccordionGroup>

***

## Creating a User

### Admin-Created Account

From the Users page, click **New User**:

1. Enter name, email, and role (Admin or User)
2. Set a password or trigger a password reset email
3. Optionally assign a subscription plan immediately
4. Click **Create**

### Invitation

Click **Invite User**, enter the email address, set the intended role, and optionally pre-assign a pricing plan. The user receives an email with a time-limited registration link.

### Self-Service Registration

If public registration is enabled in **Settings → General**, users sign up at `/register`.

***

## User Actions

| Action             | Description                                                      |
| ------------------ | ---------------------------------------------------------------- |
| **Suspend**        | Block login — data and sites preserved                           |
| **Activate**       | Re-enable a suspended account                                    |
| **Impersonate**    | Log in as the user to troubleshoot (logged in the Activity feed) |
| **Reset Password** | Send a password reset email                                      |
| **Change Role**    | Promote to admin or demote to user                               |
| **Assign Plan**    | Manually set or change the pricing plan                          |
| **Delete**         | Permanently remove the account                                   |

***

## Two-Factor Authentication

Admins can see each user's 2FA status and reset it if they lose access to their authenticator app:

1. Open the user detail → **Security** tab
2. Click **Reset 2FA** — disables 2FA and forces re-enrollment on next login

<Tip>
  Enable "Enforce 2FA for Admins" in **Settings → Security** to require all admin accounts to use 2FA.
</Tip>