Managing Users
The Users page lets you invite new staff members, manage their roles, and assign Permission Groups to control what they can access in Orchard Stack.
📍 To access: Go to Administration > Users
👥 User Roles
Every user in Orchard Stack has one of two roles:
- Admin — Full access to all features, including Administration settings (Permission Groups, Users, and all other settings). Admins do not need a Permission Group — they always have unrestricted access.
- Staff — Access is controlled by their assigned Permission Group. A Staff user without a Permission Group has no access to any modules.
Most users should be Staff with an appropriate Permission Group. Reserve the Admin role for users who need to manage settings and other users.
✉️ Inviting a New User
To add a new staff member to your organization:
Go to Administration > Users
Click Invite User
Enter the user's email address
Select a Role — Admin (no Permission Group needed) or Staff (you'll also select a Permission Group)
If Staff, choose a Permission Group to assign
Set an invitation expiration (how long the invite link stays valid)
Click Send Invitation
The user will receive an email with a link to create their account and set up their password.
Don't see an Invite User button? Orchard Stack is currently migrating to a new authentication provider, and your environment may not have been migrated yet. Please instead use the option to create a user or reach out to Support for assistance.
✏️ Editing a User
To update a user's information or access:
Go to Administration > Users
Click the user's name or the Edit button
Update the Name, Role (Admin or Staff), or Permission Group (Staff users only)
Click Save
When you change a user's role from Staff to Admin, the Permission Group field is hidden — Admins always have full access. If you later change them back to Staff, you'll need to reassign a Permission Group.
📨 Managing Invitations
Pending invitations are shown on the Users page. For any pending invitation, you can:
- Resend — Send the invitation email again (useful if the original was lost or expired)
- Revoke — Cancel the invitation so the link can no longer be used
🔒 Enabling and Disabling Users
You can deactivate a user without deleting their account:
- Disable — The user can no longer log in or access Orchard Stack. Their data and history are preserved.
- Enable — Reactivates a previously disabled user, restoring their access.
To enable or disable a user, click the corresponding button on the Users page or in the user's edit view.
🔑 Resetting a Password
If a user needs to reset their password, an admin can trigger a password reset from the Users page:
Find the user in Administration > Users
Click the Reset Password button
The user will receive an email with a link to set a new password
Users can also reset their own password from the login page by clicking "Forgot password?".