Adding an admin and setting roles
The list of everyone who can open this console, and the only place a role is given or taken away. Adding someone here is what turns a normal Baojai account into an admin.
Super admin only. Nobody else can open this screen, and nobody can give themselves a role.
Before you start
- · The person already has a normal Baojai account — you grant access to an existing account, you do not create one here.
Steps
- 1
Open Settings → Roles & team.
You should see · A table of every admin ① with their email, roles, whether they have two-factor enrolled, and when they were last active.
What it means · The 2FA column is the one to scan. On production a second factor is required, so an admin without one cannot get past the code screen and will come to you confused rather than blocked-looking.
- 2
Read the role reference on this page.
You should see · A short table naming each role and the sections it can open.
What it means · This is the same list the console and the server both use. If it disagrees with what someone actually sees, the server wins and the difference is a bug worth reporting.
- 3
Press Grant access to add somebody.
You should see · A dialog asking you to search for the email they signed up with.
What it means · If the search finds nothing, they have not signed up yet — there is no way to pre-create an admin. Ask them to register in the app first, then come back.
⚠ Granting access takes effect immediately, with no email or confirmation to the person.
How to tell it worked
- ✓The person appears in the table with the roles you gave them.
- ✓Signing in, they see exactly the sections those roles allow.
Problems
Searching for someone returns no result
Why · They have never created a Baojai account. Admin access is granted to an account, not issued as one.
Fix · Ask them to sign up in the app or on the website first, then search again.
An admin says a menu is missing
Why · Their roles do not include it, or they were given a role after signing in.
Fix · Check the Roles column here, then have them sign out and back in.
An admin cannot get past the code screen
Why · They have no second factor enrolled and production requires one.
Fix · Have them open Settings → Two-factor login, which is the one page an un-enrolled admin can still reach, and enrol there.
What cannot be undone
- ⚠ Roles take effect the moment you save. Someone you just made a moderator can ban an account a second later, and nothing asks them to confirm they meant to have that power.
- ⚠ Removing your own super_admin role locks you out of this screen, and only another super admin can undo it. Never edit your own roles as the only super admin.