docs(wiki): User Management becomes Identity & Access Management; the console is the IAM console
The page is renamed Identity-and-Access-Management (title "Identity & Access
Management"), and every link to it across the wiki follows, anchors included.
User-Management stays as a one-line pointer to it, so links from installs that
still open the old page keep working.
The header shows IAM and the console is the IAM console, so the pages say so:
"IAM in the header", "IAM -> Users", "IAM Console" (the Admin-Console page keeps
its file name and URL). Headings that named the console move their anchors
(#without-the-iam-console, #sharing-oversight-and-the-iam-console,
#where-accounts-are-managed-iam--users) and every link to them follows.
The ten console screenshots that showed "Admin" in the header or "Admin console"
over the navigation are retaken against the renamed UI, with the same demo cast,
size and framing.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(wiki): User Management is rewritten with a permission reference; the RBAC switches are on by default
User Management is restructured around accounts and roles (Root, admins,
members): signing in, inviting, temporary passwords, resetting credentials,
disabling and deleting, acting as someone, device sessions, permission sets
and overrides, with a per-permission reference and new dark-mode screenshots
(images/user-mgmt-*.png). Home and the sidebar link the reference.
Admin Console, Sharing Projects and Deploying to a Server say the switches are
on by default (./redamon.sh writes them true when missing or blank), and
Troubleshooting adds "An RBAC switch set to true changes nothing".
The light-mode images/user-management-*.png from an earlier pass are added too;
no page references them yet.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(wiki): sharing pages state what a revoke stops and how Root sets the policy without the console
Sharing-Projects: Root's sharing policy has its UI only in the admin
console, which needs RBAC_GOVERNANCE_ENABLED; without it Root sends the
same change to PUT /api/admin/instance-settings (sharingPolicy by name,
stepUpPassword). A revoke and an expiry stop the person's live work on
the project (runs, sockets, queued scans, schedules, a triage run);
running scans finish; MCP tokens stop at their next call.
Pages that still said "owner only" now state the share levels the
routes ask: Mute-Rules and Muted-Nodes (triage:read at Read,
node_filters:manage and triage:mute at Read & Write), Priority-Board
(muting at Read & Write, a run at Use AI agent; the retired log-only
access mode no longer mentioned), Agent-Skills (a project version is
also decided by a collaborator with Manage). MCP-Tool-Plugins and
Global-Settings: stdio servers need platform:agent_mcp. Data Export and
Import: chains an earlier import moved stay in that import.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(wiki): collaborating on a project: write levels, consent, transfer, the deletion wizard
Sharing-Projects: Read & Write presets and toggles, the owner's consent to
spend the project's credentials and the usage report, what a collaborator
may change in the settings, revocation stopping live work and paused
schedules, one writer at a time, private and shared conversations,
ownership transfer (re-pick list, a held project after a half-done move,
the finding-id note of OQ-R8), plugins / Agent in the Loop / shell
sessions, MCP write tools by level, the write audit actions.
User-Management: the deletion wizard (offer, Root's forced transfer,
delete anyway) and the write sharing switch. AI-Agent-Guide (answers
checked when given, approvals on a shared project, shared conversations),
Data-Export-and-Import (a co-owner's export), Plugins (shared projects),
Creating-a-Project (the collaborator's form).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(wiki): the admin console
New Admin-Console page: turning it on, the sections and who opens
each, users, permission sets and admin profiles, projects and shares,
operations, the audit viewer and export, the Instance page, quotas,
instance LLM providers, audit retention, device sessions, plugin
allowlists, audit forwarding and what is recorded; linked from the
sidebar and Home. User-Management, Global-Settings, MCP-Server,
TrafficMind, AI-Model-Providers, Plugins and Sharing-Projects say what
the console changes (the Users page move and invite-only creation, the
tunnel link, token caps, the TrafficMind summary, instance providers,
who may use a plugin, the admin share list).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(wiki): an administrator opening a shared project while acting shows in the owner's activity
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
docs(wiki): sharing projects
New page Sharing-Projects: turning sharing on (the switch and Root's
policy), the read levels and presets, what a collaborator sees at Read
and with Raw data & files, what never reaches one, found secrets and the
shared Kali sandbox, the share window, change, revoke and leave, Shared
with me, the read-only screens and the access check, expiry and the
sweep, the project activity, oversight and break-glass, act-as, MCP
tokens and what is recorded. Linked from the sidebar and Home.
User-Management gains the sharing, oversight and break-glass section
(every Full admin and Security auditor reads every project once sharing
is on, audited), and its act-as and member lines name shared projects.
Attack-Surface-Graph states the saved-view query rules.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>