Users
Back-office user management (identity via auth-service + ERP enrichment).
📄️ users-main SSRM data
users-main SSRM data
📄️ Close a session
Close a session
📄️ Close all sessions
Close all sessions
📄️ Save the customized permission set as a new ERP role and assign it
Creates a core_role from the user's private permission copy (name must be unique in the tenant) and assigns it to the user.
📄️ Reset password (force change on next login)
Reset password (force change on next login)
📄️ Force password change on next login
Force password change on next login
📄️ Authorize an IP
Authorize an IP
📄️ Get a user
Get a user
📄️ Delete a user
Delete a user
📄️ Update a user (merge-patch)
Update a user (merge-patch)
📄️ Change the list template applied to a feature for this user
listTemplate is a named view_plantilla id (shared, or private of the TARGET user) or 'default' to clear the selection.
📄️ Enable/disable a module (customized users only)
Enable/disable a module (customized users only)
📄️ Toggle one matrix cell (customized users only)
entryId = SubModule enum name (parent row) or PermissionEnum name (OTROS child row); actionId = ALL or a TipoPermiso. Identifiers are whitelisted against the gesmo-permissions enums. Anti-escalation: granting requires the caller to hold the permission; revoking is unrestricted.
📄️ Customize (copy role ÔåÆ private set) or assign an ERP role
customized=true copies the role's permissions into an editable private set and detaches the role; customized=false assigns the role. Anti-escalation: the caller can only assign/copy roles whose permissions they hold themselves.
📄️ Enable/disable IP restrictions
Enable/disable IP restrictions
📄️ Revoke a device
Revoke a device
📄️ Update a device (trust/active)
Update a device (trust/active)
📄️ users-main view definition
users-main view definition
📄️ List users (paginated)
List users (paginated)
📄️ ERP permission matrix (role-inherited or customized)
Projects the tenant's ERP permission model (core_role / core_usuario_permiso) onto the matrix contract: Module sections, SubModule rows, TipoPermiso columns, plus the per-feature list-template selection. Labels are stable i18n keys; the SPA translates them. Changes apply to live sessions on the next token refresh.
📄️ Access & authentication view (password, IP, sessions, devices, events)
Access & authentication view (password, IP, sessions, devices, events)
📄️ Users header counters
Users header counters
📄️ Company/branch options for the invite dialog
Company/branch options for the invite dialog
📄️ Remove an authorized IP
Remove an authorized IP