Users and Roles
DMARC Dashboard supports multiple users with three roles. There is no self-registration: an administrator adds users, and each new user sets their own password from an emailed invite link.
The three roles
| Role | Can do |
|---|---|
| Administrator | Everything: manage users, mailboxes, notifications, branding, GeoIP, and all settings. |
| Analyst | View dashboards and reports, and run a manual poll ("Poll now"). |
| Viewer | Read-only access to dashboards and reports. |
The final remaining administrator cannot be deleted, demoted, or deactivated, so you can never lock yourself out.
Inviting users
Adding users requires notifications (MailerSend) to be configured. See Notifications.
- Go to the Users area.
- Enter the user's username and email, and choose a role.
- The user receives a single-use invite link that is valid for 7 days.
- They follow the link and set their own password.
New users always set their own password from the invite link. DMARC Dashboard never sends a password by email, neither for invites nor for resets.
Status indicator
Each user shows a status:
- Invite pending: invited but has not yet set a password.
- Active: has set a password and can sign in, shown with a last-seen time.
Forgot password
A user who has lost their password uses forgot password on the sign-in screen. DMARC Dashboard emails them a reset link (again via MailerSend). No password is emailed; they set a new one from the link.
Change password
A signed-in user can change their own password on the change-password screen at /change-password. The current password is required.