> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt
> Use this file to discover all available pages before exploring further.

# Administration in Lerian Cabine

> How an administrator manages operator users in Lerian Cabine through Access Manager.

Lerian Cabine lets an administrator manage operator users through Access Manager.

## Users and groups

***

The **Administração** workspace has three screens: **Usuários**, **Funções**, and **Exclusões**.

Cabine sends the user and group calls to Access Manager with the token of the signed-in operator. On **Usuários**, you can:

* Create a user with **Novo usuário**. Choose the groups of the user.
* Change the name, the e-mail, and the groups of a user with **Editar**.
* Set a new password with **Redefinir senha**.

**Funções** lists the access groups that Access Manager returns, with their members.

Assign the four Cabine API groups in Access Manager: `admin-group`, `br-desk-admin-group`, `br-desk-operator-group`, and `br-desk-viewer-group`. `admin-group` is the Access Manager administrator group: it also gives administrator access on the Lerian rails, Lerian SPB included. To make a person a Cabine API admin and nothing more, assign `br-desk-admin-group`. [Access and roles](https://docs.lerian.studio/en/rails/cabine/cabine-access-and-roles.md) names what each group may do.

For the calls behind these screens, see [List Users](https://docs.lerian.studio/en/reference/platform/access-manager/list-users.md), [Create a User](https://docs.lerian.studio/en/reference/platform/access-manager/create-user.md), [Update a User](https://docs.lerian.studio/en/reference/platform/access-manager/update-user.md), [Reset a User Password](https://docs.lerian.studio/en/reference/platform/access-manager/reset-user-password.md), and [List Groups](https://docs.lerian.studio/en/reference/platform/access-manager/list-groups.md). The [Identity service](https://docs.lerian.studio/en/platform/access-manager/identity-plugin.md) describes users and groups.

## User deletion

***

A Cabine API admin requests the deletion of an operator user. A different Cabine API admin approves or rejects it. The Cabine API deletes the user in Access Manager only after the approval.

1. An admin selects **Solicitar exclusão** on **Usuários**. Without the Cabine API, **Solicitar exclusão** is disabled, with the hint **Exclusão indisponível neste ambiente**. To confirm the request, type the username.
2. The request shows in **Exclusões**.
3. A different admin selects **Aprovar** and confirms with **Excluir** to delete the user, or **Rejeitar** to keep the user.

A person decides, not an application. The Cabine API refuses a second request for a user while a request is pending or failed.

### When Access Manager does not delete the user

The Cabine API answers `502` and does not record the approval. The request stays in **Exclusões** with **Falha na execução**.

To retry, select **Aprovar** again. The approver still differs from the requester. If Access Manager no longer has the user, the retry succeeds.

The Cabine API keeps a deletion request for 30 days by default. For the calls, see [Request](https://docs.lerian.studio/en/reference/rails/cabine/request-a-user-deletion-maker.md), [Approve](https://docs.lerian.studio/en/reference/rails/cabine/approve-a-user-delete-request-checker-and-execute-the-deletion.md), and [Reject](https://docs.lerian.studio/en/reference/rails/cabine/reject-a-user-delete-request-checker.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.