Users and Permissions
User accounts are managed from the Settings panel under the Users section. You need the User Management permission to access this area.
User types
There are two user types in OptimaGPT:
Admin accounts have access to the full Gateway interface — Nodes, Executors, Configuration, and Settings. The specific areas they can act on within that interface are controlled by their individual permissions.
User accounts have access to OptimaChat only. When a User logs in, they are taken directly to the chat interface. They have no access to any admin pages regardless of permissions.
Creating a user
Click New User to open the user creation form.
Fill in the first name, last name, username, and password (minimum 8 characters), then choose a user type. Click Save to create the account.
Newly created Admin accounts are given all permissions by default. You can adjust permissions after creation by editing the account.
Editing a user
Click Edit on any user account to open the editor. From here you can:
- Change the user's password
- Change their user type (Admin or User)
- Adjust their permissions
Deleting a user
Click Delete on a user account to remove it. You cannot delete your own account, and at least one Admin account must remain at all times.
Permissions
Admin accounts can be given or denied specific permissions. A user without a particular permission cannot access or use the feature it governs.
| Permission | What it controls |
|---|---|
| Chat | Access to OptimaChat |
| Access Gateway | Access to the Gateway's admin interface |
| Node Management | Adding, removing, and configuring nodes |
| Executor Management | Starting, stopping, and configuring model executors |
| API Key Management | Creating and deleting API keys |
| Certificate Management | Configuring TLS certificates |
| User Management | Creating, editing, and deleting user accounts |
| Settings Access | Accessing the Settings panel |
| MCP Management | Adding and removing MCP servers |
| Assistant Access | Access to the Assistants feature |
Admins with all permissions can act on every area of the Gateway. Admins with limited permissions can log in and see the admin interface, but buttons and sections outside their permissions will be unavailable.