User Management

Admin vs User Model

SCRIPE separates admins and users as distinct entities. Admins manage the platform and have full RBAC with assigned roles. Users are end-users of the tenant's application with limited, self-service capabilities.

Self-Service Registration Validation Pipeline

User registration undergoes strict validation: unique email verification across the tenant partition, password strength scoring, and tenant-scoped invitation token binding.

public sealed class RegisterUserCommandValidator : AbstractValidator<RegisterUserCommand>
{
    public RegisterUserCommandValidator()
    {
        RuleFor(x => x.Username)
            .NotEmpty().MaximumLength(100)
            .Matches("^[a-zA-Z0-9_]+$");

        RuleFor(x => x.Password)
            .NotEmpty().MinimumLength(6);

        RuleFor(x => x.Email)
            .EmailAddress().When(x => !string.IsNullOrEmpty(x.Email));

        RuleFor(x => x.TenantCode)
            .NotEmpty().MaximumLength(100).WithMessage("TenantCode is required.");
    }
}

User Invitation Flow

Administrators invite users by email. A time-limited, cryptographically signed token is issued with pre-assigned roles and organizational group memberships.

AdminsController CRUD Endpoints

Account Operations

Role Management Endpoints

Bulk Operations

Enterprise Operations

Protected Admin Rules

Each tenant has exactly one protected admin the super admin who created the tenant. The protected flag prevents accidental deletion or deactivation of the tenant's primary administrator.

• Each tenant has exactly one protected admin (the super admin who created the tenant)
• Protected flag can be transferred to another admin via TransferProtection
• Protected admins cannot be deleted, deactivated, or have roles removed

Nuke & Pave Pattern

// PUT /admins/{id}/roles/sync
// Replaces ALL existing roles with the provided list
// This is safer than individual add/remove in concurrent scenarios

[HttpPut("{id}/roles/sync")]
public async Task<IActionResult> SyncRoles(string id, [FromBody] SyncRolesCommand command)
{
    // Deletes all AdminRole entries for this admin
    // Re-creates entries for each role in the request
    // Single transaction  no partial states
}