User Management

User management in Portweaver is handled through the admin settings panel.

---

Accessing User Settings

1. Open the user menu in the top right as an admin-role user account
2. Click “settings”

3. Navigate to the users tab

---

Creating a User

To create a new user:

1. Click “create”
2. Fill out the required fields:

• First name
• Last name
• Username
• Password
• Role

3. Submit the form

---

Editing Users

Users can be modified directly from the list by clicking the pencil icon:

• Update name and role
• Change password
• Enable or disable account
• Reset 2FA
• Delete user

Changes are applied by clicking the green checkmark.

---

User Roles

Portweaver uses role-based access control.

There are currently two primary roles:

• admin

  • Full access to all settings and system features
  • Can manage users, devices, and server configuration

• view

  • Read-only access to all devices
  • Cannot modify configurations or perform administrative actions

---

Auditing

All user actions are logged and can be reviewed in the auditing tab.

The audit manager provides:

• Access to history of system activity (up to 100 days of logs)

• Filtering by:

  • User
  • Route
  • Event type
  • Outcome

• Visibility into:

  • Authentication events
  • Configuration changes
  • User actions

This allows full traceability across the system.

---

Security Settings

Additional security controls are available under /settings/general

---

Password Requirements

Configure password complexity requirements:

• Minimum length
• Character requirements

All users must comply with these rules.

---

Multi-Factor Authentication (TOTP)

Portweaver supports Time-based One-Time Password (TOTP) authentication.

To enforce globally:

• Enable:

enforce TOTP 2FA for all users

When enabled:

• Users are required to enroll on next login, or immediately if they have an active session
• Access is restricted with a verify session until setup is complete

Note

The default admin account is restricted to local-only login, and cannot be setup with MFA. This is intended to be a “break glass” account as it can only be logged into with direct access to the server, and should have a strong password.

This is what a user will see when required to enroll:

---

Personalization

Every user can change the theme for their Portweaver experience from their user menu. There are several color palettes to choose from:

---

Summary

• Users are managed through the settings panel
• Roles define access level
• All actions are logged in the audit manager
• TOTP can be required for all users

This provides a centralized and secure way to manage access and system activity.