Users and roles

Everyone in your account signs in to the Prismlet app and the browser extension with their own email and password. Each user is an admin or an operator. Admins manage users on the Users page, under Settings in the sidebar.

There is no self-service signup. Prismlet sets up a new account and its first admin, and that admin adds everyone else. An email address belongs to one account only: adding an address that is already registered anywhere in Prismlet fails with That email address is already registered.

Roles

Role	In the app	In the extension
Admin	Everything in the account: Home, Prisms, Library, the Browser and Settings groups, every result.	Runs every prism of each review on the screen.
Operator	Only Prisms and Jump to in the sidebar. On a prism, only Try and Results, and Results shows only their own checks.	Runs only the prisms of each review that they may run.

An operator's Results opens on Rows of their own checks, with no Overview or Report. Their Jump to palette holds only their prisms, their own results and the actions they can take. Prismlet refuses an operator anything else, whatever page they open.

An account always keeps at least one active admin. A change that would leave none, such as disabling or removing the last admin or making them an operator, fails with An account must keep an active admin.

Add a user

1. On Users, click Add user.
2. Enter their Name and Email.
3. Pick a Role: Admin or Operator.
4. For an operator, choose under Prisms they can run:
   • All prisms covers every prism in the account, including ones made later.
   • Only these shows a checkbox for each prism. Tick the ones they may run.
5. Click Add user.

The new user appears in the table with Password set to Not set yet. The Can run column reads Everything for an admin, All prisms for an operator with all prisms, or the names of the prisms they picked.

The invite link

Prismlet sends no email when you add a user. After Add user, a dialog shows the Invite link. Click Copy link and send it to the person yourself, by chat or email.

• The link sets their password once, within 24 hours.
• The dialog shows it only now. Once you click Done, nobody can show it again.
• If the link expires or is lost, use Reset password on their row to make a new one.

When they open the link, they choose a password of at least 8 characters and are signed in to the app. They sign in to the extension with the same email and password. To check text in Chrome, they also need the extension: see Install the extension.

Edit a user

Click Edit on a user's row to change their name, role and, for an operator, the prisms they can run. The email cannot be changed. Changes apply at once to every session they have.

You cannot edit, disable, reset or remove yourself on this page. Your row shows only Sessions. To change your own password, use the avatar menu: see Your account.

Disable or enable a user

Click Disable on a user's row. Their Status changes to Disabled, and every session they have, in the app or the extension, ends. A check already waiting on the model still saves its result. They cannot sign in, and their unused password links stop working.

Click Enable to let them sign in again with their existing password. Their old sessions and links stay ended, so they sign in afresh, or you give them a new link with Reset password.

Remove a user

Click Remove and confirm. They can no longer sign in. Results they made stay in the account. Removing a user cannot be undone; to give them access again, add them as a new user.

Reset a password

Click Reset password on a user's row and confirm. A reset:

• clears their password, so it no longer signs in,
• ends every session they have, in the app and the extension,
• gives you a one-use Password link to send them yourself.

The link sets a new password once, within 24 hours, and the dialog shows it only now. When they set a password with it, they are signed in to the app.

Use a reset when someone has lost their password and cannot use Forgot password?, when an invite link expired, or when a password may be known to someone else.

Sessions

Every sign-in is a session: one per browser signed in to the app, and one per sign-in to the extension. Click Sessions on any user's row, your own included, to list theirs. Each session shows whether it is the App or the Chrome extension, when it signed in and when it expires.

Click End to end a session. That browser is signed out on its next request. To sign someone out of everything at once, use Reset password or Disable instead.