User Management
Invite team members and manage permissions
User Management lets you invite team members, assign roles, and control who has access to your Goldilocks account.
Accessing User Management
- Go to Settings
- Click Users or Team
User List
View all users in your account:
| Column | Description |
|---|---|
| Name | User's display name |
| Login email | |
| Role | Permission level |
| Status | Active, Pending, Disabled |
| Last Active | Last login date |
Inviting Users
Send an Invitation
- Click Invite User (or Add Team Member)
- Enter the user's email address
- Select a role
- Optionally add a personal message
- Click Send Invite
What Happens Next
- User receives email invitation
- They click the link to accept
- Create their password
- Gain access based on assigned role
Pending Invitations
View outstanding invitations:
- Email address
- Role assigned
- Date sent
- Option to resend or revoke
Resend Invitation
If user didn't receive:
- Find the pending invitation
- Click Resend
- New email sent to same address
Revoke Invitation
To cancel before acceptance:
- Find the pending invitation
- Click Revoke or Cancel
- Link no longer works
User Roles
Admin
Full access to all features:
- All content management
- AI agent configuration
- Widget settings
- Analytics and insights
- User management
- Billing and settings
Who should be Admin: Account owners, managers
Document Manager
Content and moderate access:
- All content management
- Approve pending content
- View analytics
- Configure escalation
- Cannot manage billing or users
Who should be Document Manager: Content team leads, senior support
Document Submitter
Limited content access:
- Create content (pending approval)
- View own content
- Basic dashboard access
- Cannot approve or configure
Who should be Document Submitter: Content contributors, support agents
Managing Existing Users
Change Role
To change a user's role:
- Find the user in the list
- Click on their row or the edit icon
- Select new role
- Save changes
Disable User
To remove access without deleting:
- Find the user
- Click Disable or toggle status
- User can no longer log in
- Can be re-enabled later
Delete User
To permanently remove:
- Find the user
- Click Delete or Remove
- Confirm deletion
Deleted users cannot be recovered. Use Disable if you might restore access later.
Transfer Ownership
To make someone else the account owner:
- Go to account settings
- Find Transfer Ownership
- Select new owner (must be Admin)
- Confirm with your password
- Ownership transfers
Role Permissions Detail
| Permission | Admin | Doc Manager | Submitter |
|---|---|---|---|
| Create content | ✅ | ✅ | ✅ |
| Publish content | ✅ | ✅ | ❌ |
| Approve content | ✅ | ✅ | ❌ |
| Delete content | ✅ | ✅ | Own only |
| Configure personas | ✅ | ❌ | ❌ |
| Configure workflows | ✅ | ❌ | ❌ |
| Widget settings | ✅ | ❌ | ❌ |
| View analytics | ✅ | ✅ | ❌ |
| Manage users | ✅ | ❌ | ❌ |
| Billing | ✅ | ❌ | ❌ |
Team Seats
Seat Limits
Your plan includes a certain number of seats:
- Free: 1 seat
- Pro: 5 seats
- Business: 15 seats
- Enterprise: Unlimited
At Seat Limit
If you've used all seats:
- Remove/disable unused users
- Upgrade for more seats
- Contact sales for seat add-ons
Counting Seats
What counts as a seat:
- Active users
- Pending invitations
- Disabled users don't count
Security
Password Requirements
Users must have secure passwords:
- Minimum 8 characters
- Mix of letters and numbers
- Special characters recommended
Two-Factor Authentication
If enabled for your account:
- Users must set up 2FA
- Required for Admins
- Optional for other roles
Session Management
Users can manage their sessions:
- View active sessions
- Log out of other devices
- See login history
Best Practices
Use Least Privilege
Assign the minimum role needed:
- Most users should be Submitters
- Document Managers for team leads
- Few Admins (1-2)
Regular Audits
Review users periodically:
- Remove former employees
- Disable inactive accounts
- Verify role appropriateness
Onboard Properly
When adding new users:
- Explain their role and permissions
- Provide training resources
- Set up a buddy for questions
Off-board Securely
When removing users:
- Disable account immediately
- Check for shared credentials
- Review any content they created