Users

The DeepFilter management panel controls the email traffic, quarantine, filtering rules and system settings of every domain from a single place. Any account that can reach this panel is a serious risk in the wrong hands: one full-access account with a leaked password opens up the entire email security of the organization, and an administrator whose permissions have not been narrowed to their actual job can break a critical rule by accident.

The Users screen limits that risk with role-based access. Each administrator is given only as much authority as their job requires (the principle of least privilege): a domain administrator sees only their own domain, an auditor only watches, and full access stays with the people who genuinely need it. Granting access to a new administrator, changing an account's role, resetting its password, renewing its two-factor authentication or removing its access are all done from this screen.

Every row in the list summarizes one administrator account together with its role, two-factor authentication method and active status. You reach the screen through Management → Users.

Roles

Every administrator account is assigned one of four roles, and the roles are mutually exclusive — an account cannot be both Admin and Domain Admin at the same time. The role determines which operations the user can perform. User management (adding accounts, deleting them, resetting passwords) is open only to the Admin role.

Admin — Full authority over all domains, all settings and all users. Only an Admin can perform any of the operations on this screen. Marked in the row with an amber shield badge.

Domain Admin — Responsible only for one or more domains assigned to them (at least 1, at most 100 domains). The number next to the badge shows how many domains they are responsible for. In the menu they see only the Dashboard, Email Traffic, Quarantine and Whitelist sections; the SMTP Queue, Blacklist, Management and Monitor groups are hidden from this role. They also cannot perform system-wide learning operations (filter training that affects every domain at once).

Read-only (Viewer) — An account for monitoring and auditing. It cannot perform management or domain management operations; when such an operation is attempted, the system denies access. Suitable for auditors, reporting teams or teams that only follow status. Marked in the row with an eye badge.

User — The narrowest role; it carries no administrative authority at all. No badge is shown in the row and the role appears as plain text.

note

Hiding menu sections applies only to the Domain Admin role. The Admin, Read-only (Viewer) and User roles see every section in the top menu — for these roles the access limit is applied at the operation level rather than through menu visibility: when an unauthorized operation is attempted, the system rejects it.

Settings

The fields below are managed in the New User and Edit forms. The role selection is in the same form; for what each role does, see the Roles section above. The Require 2FA and Active status fields exist only in the Edit form; a new user is always created as active and without a two-factor requirement, and those two settings are applied from the Edit form after the account has been created.

Email address — The identity of the account and the sign-in username; the user signs in to the panel with this address. The address is converted to lowercase when it is stored. (required field)

Why it exists: It gives every administrator a unique identity and determines the address that password resets and one-time codes sent by email will go to.

If you change it: If you change the email while editing, the user's sign-in name changes with it; from then on the user must sign in with the new address. A second account cannot be created with the same email — the system rejects a duplicate address.

Authorized domains — Appears when the Domain Admin role is selected and determines the domains the user will manage. The user sees only the traffic, quarantine and whitelist of those domains. (required for Domain Admin; at least 1, at most 100 domains)

Why it exists: It confines a domain administrator to their own area of responsibility and prevents them from seeing the data of another unit or customer.

If you change it: Adding a domain widens the user's field of view; removing one narrows it. When you make a user a Domain Admin you must assign at least one domain; if none is assigned, the record is rejected. If you take the user out of the Domain Admin role, the assigned domains are deleted — if you give the role back, you must assign the domains again.

Require 2FA (Edit form only) — Forces this user to set up two-factor authentication (2FA) on their next sign-in. (default: off; recommended to be turned on for Admin accounts)

Why it exists: A password on its own can be stolen. A second factor protects the account even if the password leaks; on the most privileged accounts it makes that protection certain.

If you change it: If you turn it on, the user cannot use the panel without setting up 2FA. If you turn it off, 2FA is left to the user's own preference. This setting is specific to a single user and works independently of the system-wide 2FA requirement. Which method the user has set up (Authenticator, Email or None) appears in the 2FA column; that column is informational only and is not changed from here.

Require password change on first login — Forces the user to change their password on their first sign-in (or on the first sign-in after a password reset). (default: off for a new user, on for a password reset)

Why it exists: An initial password set by an administrator is also known to that administrator. Having the user move to a password only they know closes this shared-secret surface.

If you change it: On → the user renews their password at first sign-in. Off → the password you set stays in place.

Active status (Edit form only) — Makes the account active or inactive. The dot in the STATUS column reflects this value: green = active, red = inactive. (default: a new user is created as active)

Why it exists: It lets you temporarily remove an administrator's access without deleting their account and history (approved leave, a change of duties, a temporary suspension).

If you change it: If you make it inactive, the user cannot sign in but the account and the audit history are preserved; if you make it active again, access comes back. This is a safe alternative to permanent deletion (see Things to Watch Out For).

Adding a New User

Prerequisites

• You must be signed in with the Admin role; adding users is open only to an Admin.
• If you are going to add a Domain Admin, the domain you will assign must already be defined in the system.

Steps

1. Open Management → Users and click New User at the top right.
2. Enter the sign-in address in the Email field; this becomes the user's sign-in name.
3. Optionally enter a Name (the display name; it may be left empty).
4. Select a Role. If you selected Domain Admin, tick at least one authorized domain in the field that appears.
5. Set an initial password. By default the password must be at least 8 characters and contain a letter, a digit and a special character; a password that does not meet this condition is rejected.
6. If necessary, tick the Require password change on first login option.
7. Click Save.

Verification — how to know it worked

• The new account appears in the list and carries a green dot in the STATUS column. The user can sign in with the email and password you set.

Changing User Details and Role

Prerequisites

• Admin role.

Steps

1. In the Management → Users list, click the pencil (Edit) icon on the relevant row.
2. Update the email, name, role, authorized domains, active status or the two-factor requirement.
3. If you are making the role Domain Admin, assign at least one domain. If you are lowering the role from Domain Admin to another role, remember that the assigned domains will be removed.
4. Click Save.

Verification — how to know it worked

• The role and badge in the row are updated. A change of role and permissions takes effect on the user's next sign-in, not immediately.

Resetting a Password

If a user forgets their password or it has to be renewed for security reasons, this operation gives them a new initial password.

Prerequisites

• Admin role.

Steps

1. In the Management → Users list, click the key icon on the user's row.
2. Set the new password. By default the password must be at least 8 characters and contain a letter, a digit and a special character.
3. Click Save.

Verification — how to know it worked

• The user can sign in with the new password and is asked to change it on their first sign-in.

tip

On a password reset, "Require password change on first login" is on by default; the user replaces the temporary password you set with their own at first sign-in. Send the new password to the user over a secure channel only.

Resetting Two-Factor Authentication

If a user loses their two-factor authentication device (the authenticator app or access to their email), you reset their 2FA; the user sets up a new method at their next sign-in.

Prerequisites

• The user must have 2FA set up. If the 2FA column says None, there is nothing to reset and the reset button is disabled.
• You cannot reset the 2FA of your own account from here; use the Profile screen for that.

Steps

1. In the Management → Users list, click the pencil (Edit) icon on the user's row.
2. Click the Reset 2FA button in the form.
3. Click Save.

Verification — how to know it worked

• The 2FA column returns to None; the user is directed to set up a new authentication method at their next sign-in.

note

The reset clears the user's authenticator app method and email method together, and it is written to the audit log. The operation is a button inside the Edit form, not an icon in the list.

Deleting a User

Deletion permanently removes an account and its access. If you want to remove access temporarily, make the account inactive instead of deleting it (see Active status).

danger

Deleting a user cannot be undone, and the system does not stop you from deleting the last Admin account. If only one full-access Admin is left in the system and you delete it (or lower its role), access to the management interface is lost entirely. Before deleting, make sure at least one other active Admin account exists.

Steps

1. In the Management → Users list, click the trash icon on the user's row.
2. Confirm the confirmation prompt.

Verification — how to know it worked

• The account disappears from the list and that user can no longer sign in.

note

You cannot delete the account you are signed in with; the system does not allow it. If your own account has to be removed, another Admin must perform the operation.

Things to Watch Out For

• Deactivate instead of deleting. When you remove an administrator's access, in most cases you do not need to delete the account. If you set the active status to inactive from the Edit screen, the user cannot sign in but the account, the role and the audit history are preserved; you can reactivate it later. Deletion is preferable only when the account must be removed completely.
• A role change is not immediate. If you change a user's role, the new permissions are applied at the user's next sign-in. If you need to cut off access right away, consider making the account inactive.
• Password requirements do not apply retroactively. The rules applied to an initial password (by default at least 8 characters, letter + digit + special character) are checked only when creating a new account and when resetting a password; they do not affect weak passwords that are already stored. To strengthen the password of an existing account, use the password reset operation.

Troubleshooting

• A Domain Admin cannot see some menus. This is by design. A Domain Admin sees only the Dashboard, Email Traffic, Quarantine and Whitelist sections; the SMTP Queue, Blacklist, Management and Monitor groups are hidden from this role. If the user needs access to those sections, review their role.
• The Reset 2FA button is disabled. The user has no two-factor authentication set up; since there is nothing to reset, the button is off. If the 2FA column says None, this is the expected state.
• I cannot delete my own account or reset my own 2FA. The system blocks these two operations on the account you are signed in with. For deletion, ask another Admin; to renew your own 2FA, use the Profile screen.
• A new user cannot be added. There are two common reasons: the email you entered is already registered (a duplicate address is rejected), or the password you set does not meet the requirements (by default at least 8 characters, letter + digit + special character).
• The ADDED BY column is empty (—) for one account. Because the first administrator account was created by the system installation rather than by an administrator, that row carries no "added by" information. Accounts added later show the name of the administrator who created them.