[Feat]: Global user list/management

[crrobinson14]

Is your feature request related to a problem? Please describe.

When deploying LowCoder in SaaS mode, the workflow is for a user to sign up / register, then use an invite link to "join" a workspace. There are admin tools to remove or manage workspace members (e.g. to set their roles) but there is no way to manage the global user list itself, e.g. to delete a user or force a password reset.

This is a problem if an employee is terminated - there is no way to delete them for good at the global level, which bypasses part of the security provided by disabling signups. Terminated employees can still login and access their personal workspaces which is a huge no-no in regulated environments even if they can't get to workspaces they were removed from.

The password reset would be hugely helpful in new setups where email isn't working yet and/or existing setups where bugs or other issues prevent email from working in the first place. There are also some environments in which outbound email is restricted for regulatory or IT policy reasons so having self-service resets be the only option (outside the API) is a blocker for those environments.

Describe the solution you'd like

Nothing fancy. Just a simple list of registered users at the global level (regardless of any workspace membership) and a few basic functions: delete and reset password would be a huge win. A nice-to-have would be the ability to add or remove users from a workspace in this view

Describe alternatives you've considered

Manually editing the records in the MongoDB "users" table, which feels like a huge anti-pattern for how this should be done.

[placidic]

Although not in the UI, the API supports both those methods - the ability to add new users to a workspace, as well as reset passwords

[crrobinson14]

Yes, I understand. But surely it can't be an expectation that every LowCoder instance owner create a custom app just to view/delete users? Under Settings we have an admin section for users-in-a-workspace. Is it unreasonable to hope for one for users in general? Since the API is already there, as you said, this is really just a UI task, right?

[ScottKemp]

I would love to see a permanent user delete API. As far as I know, it doesnt exist. We are doing SAAS as well.