[Feature Request] Account creating/invitation from admin panel

[zombiehunternr1]

Prerequisites

• I have searched existing feature requests and this is not a duplicate

Platform

Admin Portal

Feature Type

Enhancement to Existing Feature

Problem or Use Case

Currently, in the Admin Panel I cannot create or invite users. The only way to create new users is by enabling the "Create New User" button on the public-facing login page.

Keeping this registration enabled permanently is not ideal, as it allows anyone with access to the instance URL to create an account, increasing the risk of unwanted registrations and reducing administrative control over who can access the service.

This is what I have to do know if I want to add one or more users:

• Modifying the environment configuration to enable user registration.
• Restarting the container.
• Allowing the user(s) to create an account.
• Disabling registration again.
• Restarting the container a second time.

This process creates unnecessary administrative overhead and introduces avoidable service interruptions for existing users while the container is being restarted.

Proposed Solution

Add user creation/invitation to the admin panel, this could be:

• The ability for administrators to create user accounts directly.
• The option to send invitations via email or share a generated invitation link manually (perhaps time-limited links?).
• A view to manage pending invitations and invited users.

This would allow administrators to keep public registration disabled while still being able to create and/or invite new users in a controlled manner. It would improve security, reduce the risk of unwanted registrations, provide better visibility into who has access to the platform, and eliminate the need for service restarts when granting access to new users.

Alternatives Considered

I've put this information in the Problem or Use Case section but I'll put it here for a quick overview.
This is what I have to do each time to create a new user.

• Modifying the environment configuration to enable user registration.
• Restarting the container.
• Allowing the user(s) to create an account.
• Disabling registration again.
• Restarting the container a second time.

Additional Context

No response

[lanedirt]

Hi @zombiehunternr1,

Thanks for the feature request! This will be added in one of the next releases. (This has been discussed on Discord before, so sharing my thoughts here as well):

--

The main reason account creation only works through the client web app is because of the end-to-end encryption. Account creation is not simply creating a database record; the client must perform master password key derivation (Argon2id), SRP setup, and generation of the encryption keys required to initialize the vault. The admin portal does not have access to this information and cannot perform these steps on behalf of a user.

So currently the only way (as you described in your post) is to temporarily enable public registration, create the user, then disable it again.

An invitation-based flow (e.g. email invitations or time-limited invite links) is something that could work as nice alternative, as it could allow admins to pre-authorize users while still keeping the cryptographic account initialization in the client where it belongs. So this is something that will be looked at.

[vincegre]

Thanks for the feature request! This will be added in one of the next releases. (This has been discussed on Discord before, so sharing my thoughts here as well):

Thanks 👍

An invitation-based flow (e.g. email invitations or time-limited invite links) is something that could work as nice alternative, as it could allow admins to pre-authorize users while still keeping the cryptographic account initialization in the client where it belongs. So this is something that will be looked at.

Time Limited invite links or a code you give at new user and that allows him to register a new account even if it's disallowed in admin would be the best as email flow would not work for the ones like me that don't use the email part of AliasVault ;)