Skip to main content

Accounts

How user accounts and role groups are managed.

Users​

Go to Administration → System → Users. Each user shows the username, name, roles and staff/superuser status.

Users are normally created and updated by SSO login. Use this page to inspect accounts and manage group membership or flags such as active/staff.

Groups​

Groups bundle users into roles. SES uses role groups that are populated from OIDC roles at login.

Default groups:

  • ses-superuser
  • ses-admin
  • ses-teacher

Assigning group membership grants or revokes the permissions that determine which admin sections a user can see.

Users + groups + SSO

Roles come from Keycloak at login. After changing a role in Keycloak, the user usually needs to log in again for the new role to take effect.