User management requires an Administrator session plus temporary Superadmin elevation.

• Unlock Superadmin with the configured passcode.
• Search users by name or email in the Central Auth directory.
• Create or edit a user with a valid email, NIM, name, and at least one role.
• Assign multiple roles when a person works in more than one context.
• Exit Superadmin mode when sensitive administration is complete.