User CRUD

medium complexity MVP extracted User Management Confidence: 100%

Components

Shared

User Stories

Yes

Analyzed

Description

Enables organization administrators to create, read, update, and deactivate user accounts within their tenant. Admins can invite peer mentors and coordinators by email, assign initial roles, and revoke access when volunteers leave. The feature covers the full user lifecycle from invitation through deactivation, ensuring org admins maintain complete control over who holds active access to the platform without requiring Norse Digital Products staff involvement.

Sources & reasoning

User CRUD is the prerequisite for every other admin capability - without it no organization can onboard or manage its volunteer cohort. Both the Fase 1 MVP roadmap and the Admin Web Portal product description explicitly list user management (invitere, deaktivere, rolletildeling) as a Phase 1 / MVP deliverable.

No source references — this artifact was included based on reasoning alone (see above).

Analysis

Business Value

Without user management, no organization can onboard peer mentors or coordinators, making this the foundational admin capability that all other admin features depend on. Org admins must invite new members by email, assign roles, deactivate leavers, and correct data errors without external help. Clean user lifecycle management also directly supports GDPR compliance by ensuring former volunteers are promptly deactivated and their session tokens revoked. The feature is explicitly listed in the Admin Web Portal MVP scope for all four organizations in the prioritization roadmap.

Implementation Notes

User records are managed via the shared Next.js REST API on Vercel, with all queries scoped to the requesting admin's organization for multi-tenant isolation. Invitation sends a tokenized email link expiring after 48 hours; the recipient completes registration by setting a password. Deactivation sets a status flag rather than deleting rows, preserving the audit trail and all historical activity data. The admin UI is a server-side-rendered Next.js page with a filterable data table, inline status badges per user, and a contextual action menu per row for edit and deactivate operations.