Accounts & sign-in

Envergure protects access with email + password authentication. Everyone signs in with their own account; their role decides what they can do.

Interim solution: it will be replaced by centralised authentication (Keycloak, SSO) in due course. The accounts described here stay simple and scoped to each instance.

Signing in

On launch, the sign-in screen asks for your email and password. Once signed in, you reach your instance; your name shows top-right, with a Sign out button.

• The session stays active until you sign out (time-limited token).
• Your instance (the data scope) is determined by your account — no need to pick it manually.

Roles

• Administrator — full access, and can manage accounts (create, edit, delete).
• User — access to the business modules (fleet, stock, maintenance…), without account management.

Managing accounts (administrators)

Menu System & audit → User accounts (route /admin/users).

• Create an account: fill in email, display name, password (8 characters minimum) and role, then Create account.
• Reset a password: key icon on the account row → enter the new password.
• Enable / disable: click the status pill. A disabled account can no longer sign in (without being deleted).
• Delete: trash icon (irreversible — the account can no longer sign in).

Good practices

• Grant the administrator role sparingly.
• Prefer disabling an account over deleting it if the person might return.
• Passwords are stored hashed (never in clear text) and are never shown again.