User Management

Manage system users, passwords, roles, and two-factor authentication.

---

User List

Go to System → Users to see all users with their username, role, and tenant assignment.

---

Creating a User

1. Click Create User
2. Fill in:
3. Username
4. Password
5. Role — admin or user
6. Tenant — which tenant this user belongs to
7. Click Create

The user can immediately log in with the provided credentials.

---

Roles

Role	Capabilities
admin	Full access to all features within their tenant
user	Limited access based on assigned permissions

Super-admins in the default tenant can manage all tenants and system-wide settings.

---

Changing Your Password

1. Go to System → Users
2. Click Change My Password
3. Enter your current password, new password, and confirmation
4. Click Change Password

---

Deleting a User

Click the Delete button next to any user in the list. This requires confirmation.

---

Two-Factor Authentication (2FA)

Watchgrid supports TOTP-based two-factor authentication, compatible with Google Authenticator, Authy, 1Password, and other TOTP apps.

Enabling 2FA

1. Go to System → Users
2. Click 2FA Settings
3. The setup wizard shows a QR code
4. Scan the QR code with your authenticator app
5. Enter the 6-digit verification code to confirm
6. 2FA is now active for your account

Logging In with 2FA

1. Enter your username and password as usual
2. A second screen asks for your 6-digit verification code
3. Enter the code from your authenticator app
4. You're logged in

Technical Details

• Algorithm: HMAC-SHA1 (compatible with Google Authenticator)
• Time window: ±30 seconds (checks previous, current, and next code)
• Digits: 6
• Standard: RFC 6238 (TOTP)

---

First-Time Onboarding

When a user logs in for the first time (or after being created by an admin), they may see an onboarding wizard that guides them through:

• Setting a new password
• Configuring initial preferences
• Optional 2FA setup

This ensures every user has a secure, personalized account from the start.