Each account has a username, password, admin flag, any number of API tokens, and a profile (an optional full name and email used for attribution), which the account holder can edit themselves, or an admin can set on their behalf.

• Admins can reach the admin UI and manage spaces, accounts, and tokens. They can also log into every space.
• Non-admin accounts are ordinary users: they can log into any space they are a member of, and any space whose access level admits them (see #Access).

There is no self-service signup. Admins create accounts. There is no password recovery either, an admin sets a new password from the Users tab. Administrators can also provision SSO accounts alongside local accounts.