Roles and permissions¶
Every account has one or more roles. Roles are set by admins when creating or editing a user.
| Role (in the UI) | Technical name | Effect |
|---|---|---|
| User | ROLE_USER |
Default role of every account. |
| Admin | ROLE_ADMIN |
Full access to the admin interface, all domains and all settings. |
| Domain admin | ROLE_DOMAIN_ADMIN |
Manages users, aliases and invite codes of their own domain. Includes Permanent and Multiplier. |
| Permanent | ROLE_PERMANENT |
The account is never removed as inactive. |
| Multiplier | ROLE_MULTIPLIER |
Can create invite codes at any time, without limit and waiting period. |
| Suspicious | ROLE_SUSPICIOUS |
No invite codes; already issued codes of this user become invalid. |
| Spam | ROLE_SPAM |
Account is locked: no sending, no IMAP/POP3 login. Includes Suspicious. |
Spam¶
Use Spam when an account is compromised or sends spam.
- SMTP authentication (Postfix) and IMAP/POP3 login (Dovecot) are refused. The user can't send or read emails anymore.
- Incoming emails are still delivered to the mailbox.
- The user can still sign in to the web interface but only sees an "Account locked" page with a request to contact support. Aliases and OpenPGP keys can't be managed.
- All effects of Suspicious apply, too.
To unlock the account, remove the role. Consider requiring a password change at the same time.
Suspicious¶
Use Suspicious when an account invites spammers or abusers.
- The user doesn't get invite codes anymore and the invite code page is hidden.
- Unused invite codes of this user can't be used for registration anymore.
- When the role is added, Userli emails a list of all accounts that registered with this user's invite codes to the notification address (see Settings). Review them, too.
Accounts with Suspicious or Spam are marked in the user search.
Multiplier¶
Multipliers see a Create invite code button on their invite code page and can create as many codes as they want – as long as invitations are enabled for their domain. Use this for people who onboard many users, for example the organizers of a group.
Permanent¶
Userli regularly removes accounts that were not used for about two years (see Maintenance). Accounts with Permanent, Domain admin or Admin are skipped. Use it for role or function accounts that nobody signs in to.
Admins and domain admins¶
| Admin | Domain admin | |
|---|---|---|
| Users, aliases, invite codes, OpenPGP keys | all domains | own domain |
| Manage users with role Admin | ✓ | |
| Assignable roles | all | User, Domain admin, Permanent |
| Set alias destination and SMTP quota | ✓ | |
| Edit invitation settings of a domain | all domains | own domain |
| Create and delete domains | ✓ | |
| Reserved names, notifications | ✓ | |
| Settings, API tokens, webhooks, maintenance | ✓ |
The domain of a domain admin is the domain of their own email address.
Domain admins and restricted roles
Domain admins can't assign Spam, Suspicious or Multiplier. When a domain admin saves a user who has one of these roles, the role may be removed. Ask an admin to edit such accounts.
The first admin¶
The setup wizard creates the first admin account postmaster@<domain>, see
Initial setup. You can (re)set its password
on the command line:
bin/console app:admin:password