> ## Documentation Index > Fetch the complete documentation index at: https://docs.coreflux.org/llms.txt > Use this file to discover all available pages before exploring further. # User Management > Create, edit, and delete broker users; manage credentials and access control Navigating to User Management in the Coreflux HUB by selecting System in the top navigation and clicking User Management ## Why Use User Management? You need to control who can connect to your broker—add users, set passwords, and manage access. The User Management in the Coreflux HUB lets you create, edit, and delete users without editing configuration files or using command-line tools. ## When to Use It * **Adding users** — Create new users for devices, applications, or operators * **Updating credentials** — Change passwords * **Managing permissions** — Control which features each user can access * **Removing access** — Delete users who no longer need broker access *** ## Accessing User Management In the HUB top navigation, select **System**, then **User Management**. The user accounts table shows all configured users with their permissions. Coreflux HUB User Management window with a 2 users badge, a refresh and add buttons in the top-right, an Important Notice stating that changes must be saved via commands to $SYS/Coreflux/Command and that user data is retrieved from $SYS/Coreflux/Config/Users, and a User Accounts table displaying root (marked You) with Full Access Enabled and User Management and Log Management Disabled plus edit and key action icons, and test with all three permissions Disabled plus edit, key, and delete action icons ## User Permissions Each user has three permission categories, controlled by toggles: | Permission | Description | | ------------------- | ----------------------------------------------------------------------- | | **Full Access** | Full administrative access to broker configuration and asset management | | **User Management** | Permission to create, edit, and delete other users | | **Log Management** | Access to broker logs, trace logs, and log export | Toggle permissions on or off for each user. The `root` user has special permissions that cannot be fully modified. ## Creating a User 1. Click the **+** button in the top-right corner. 2. The **Add New User** modal opens. Coreflux HUB Add New User modal overlaid on the User Management window with the description Create a new user account; the user will be created with default permissions, and three input fields — Username with placeholder Enter username highlighted, Password with placeholder Enter password and a visibility toggle, and Confirm Password with placeholder Confirm password and a visibility toggle — plus Cancel and Add User buttons 3. Enter a username and password (with confirmation). 4. Click **Add User**. The user is created with default permissions and can now connect to the broker. ## Editing a User Toggle permission switches directly in the user table to modify access. When you change a permission, the user row shows a **Modified** badge and action buttons appear: Coreflux HUB User Management window with an Important Notice at the top and a System Configuration Updated banner explaining that the system user configuration has been updated while editing and offering to refresh; the User Accounts table shows root with Full Access Enabled and User Management and Log Management Disabled, and test with a Modified badge, Full Access toggled off with an Original: true note, and save, cancel, change password, and delete action icons on the right | Action | Icon | Description | | ------------------- | ----------- | ------------------------------------------- | | **Save** | Floppy disk | Save the modified permissions to the broker | | **Cancel** | X | Revert unsaved changes | | **Change Password** | Key | Update the user's password | | **Delete** | Trash | Remove the user from the broker | The header bar shows badges for **modified** users and **System Updated** status when the broker configuration changes while you are editing. ## Deleting a User Click the delete (trash) icon next to a user and confirm the deletion. The `root` user cannot be deleted. *** ## Next Steps Learn about authentication and security options.