Skip to main content
The Users admin panel gives you full control over who can access ThreatLab, what roles they hold, and visibility into each analyst’s exercise history. From a single view you can inspect every registered account, adjust role assignments on the fly, lock out accounts that should no longer have access, and audit what any analyst has worked on — all without touching the database.

​
Prerequisites

Most actions in this section require the manage_users capability. Viewing an analyst’s exercise history additionally requires the view_user_history capability. Both are bundled in the built-in admin role, or you can attach them to a custom permission role.

​
Viewing Users

Navigate to Admin > Users to see every registered account. The table displays each user’s email address, their assigned role badges, and current account status — either Active or Banned.
New users are automatically assigned the analyst role. Grant additional permission roles to enable capabilities.

​
Assigning and Revoking Roles

A user can hold any number of roles simultaneously. Their effective capability set is the union of all capabilities granted by every permission role they hold.
1

Open the Users panel

Navigate to Admin > Users.
2

Select the user

Click the user whose roles you want to modify.
3

Open the role picker

Click Assign Role on the user detail panel.
4

Select the role

Choose the role you want to grant from the dropdown list.
5

Confirm

Click Confirm to save the assignment. The role badge appears on the user’s profile immediately.

​
Banning Accounts

Banning prevents a user from logging in or starting exercises. Use this when an account should be suspended without being deleted.
1

Open the Users panel

Navigate to Admin > Users.
2

Select the user

Click the user you want to ban.
3

Initiate the ban

Click Ban on the user detail panel.
4

Confirm

Confirm the action in the dialog. The account status changes to Banned immediately.
Banning a user immediately ends their active session.
To reinstate a banned user, follow the same steps and click Unban instead.

​
Viewing User Exercise History

With the view_user_history capability, clicking any user opens a detailed history panel showing their completed exercises, in-progress sessions, point totals, and notebook entries. Use this to assess analyst progress, identify blockers, or review notebook notes for coaching purposes.