Manage users
Manage via Logto Console
Browse and search users
To access the user management functionality in the Admin Console, navigate to the "User management" tab on the left-hand side of the screen. Once there, you will see a table view of all the users on the right-hand side of the screen.
The table consists of three columns:
- "User", which displays information about the user, such as their avatar, full name, username, phone number, and email
- "From application", which displays the name of the application that the user initially registered with
- "Latest sign-in", which displays the timestamp of the user's most recent sign-in.
It supports keyword mapping for name, user id, username, phone number, email address
Add users
Using the Console, developers can create new accounts for end-users. To do so, click on the "+ Add user" button in the screen's upper right corner.
After the new user has been created, you can copy their entered identifiers (such as email address) and initial password to send to them. This will allow them to log in to the system and start using it.
The initial password will only appear one time, but you can reset the password later.
View and update the user profile
To view the details of a user, simply click on the corresponding row in the user table. This will take you to the "User Details" page where you can find the user's profile information, such as their avatar, full name, user ID, email, phone number, username, custom data and social connections. The "Social connections" section displays a list of social connectors that the user has linked to their account. For example, if the user has signed in using their Facebook account, you will see a "Facebook" item in the list. You can refer to the social identities documentation for more information.
Please note that while the full name, avatar image URL, and custom data can be edited, the social connections can be removed, and the other properties are read-only.
It is important to confirm that the user has an alternative sign-in method before removing a social connection, such as another social connection, phone number, email, or username-with-password. If the user does not have any other sign-in method, they will not be able to access their account again once the social connection is removed.
View user activities
To view the recent activities of a user, navigate to the "User logs" sub-tab on the "User details" page. Here, you can find a table that displays the user's recent activities, including the action performed, the result of the action, the related application, and the time that the user acted.
Click the table row to see more details in the user log, e.g., IP address, user agent, raw data, etc.
Suspend user
On the "User details" page, click "Three dots" -> "Suspend user" button.
Once a user is suspended, the user will be unable to sign in to your app and won't be able to obtain a new access token after the current one expires. Additionally, any API requests made by this user will fail.
If you want to reactive this user, you can do so by clicking "Three dots" -> "Reactivate user" button.
Delete user
On the "User details" page, click "Three dots" -> "Delete" button. Delete user can not be undo.
Reset user password
On the "User details" page, click "Three dots" -> "Reset password" button.
After you reset the password, copy and send it to the end-user. Once the "Reset password" modal is closed, you can no longer view the password. If you forget to keep it, you can reset it again.
Manage roles of users
In the "Roles" tab of the user details page, you can easily assign or remove roles to meet your desired outcome. Check RBAC - Manage a user's roles to learn more
View the organizations the user belongs to
Logto supports organizations and can manage their members. You can easily view user details and see which organization they belong to.
Manage via Logto Management API
Management API is a collection of APIs that provide access to the Logto backend service. As previously mentioned, the user API is a critical component of this service and can support a wide range of scenarios.
The user-related RESTful APIs are mounted at /api/users except for the user activities, i.e., user logs /api/logs?userId=:userId.
You can manage users through the Management API in several use cases. Such as advanced user search, bulk creation accounts, invitation-only sign-up, etc.