Users & sign-in

Users and sign-in need a Team license. With sign-in on, everyone signs in with their own account, each account has a role, and Activity records who did what. To turn sign-in on, see Turn on sign-in.

Without sign-in, Redrive has no login at all and everyone using it can do everything an admin can.

Roles

The role can	Viewer	Operator	Admin
See brokers, queues and messages; peek and scan	Yes	Yes	Yes
Redrive, discard and purge		Yes	Yes
Publish and save messages		Yes	Yes
Change bindings, exchanges and queues		Yes	Yes
Read Activity		Yes	Yes
Manage users, brokers, contract packages and the license			Yes

Controls a role can’t use are hidden. A viewer sees no Publish or Activity item, no redrive or discard buttons and no message checkboxes, and only admins see Users. A role changed while someone is signed in takes effect on their next action, with “Your role doesn’t allow that.”

Add a user

Open Users and click Add user:

Field	Notes
Username	1 to 64 characters: letters, digits and - . _ @ +. Email addresses work.
Display name	Shown on the account button and in Activity.
Role	Viewer, Operator or Admin. Operator is picked by default.
Password	At least 5 characters. Generate makes one in three groups of four, without look-alike characters.
Must change it at first sign-in	Ticked by default.

The list shows each user’s role, status (Active, Disabled or Must change password) and last sign-in. Click a row to edit the display name, role, or the Disabled switch. The row’s ⋯ menu holds Edit…, Reset password… and Delete…. A deleted user can’t sign in again, and their Activity entries keep the name.

Redrive won’t let you demote, disable or delete the last enabled admin, and you can’t delete yourself.

Sign in

A user signs in with their username and password. After an admin sets their password with Must change it at first sign-in ticked, they choose a new one before they reach the app. The new password has to differ from the current one.

To change your own password later, choose Change password from the account menu at the bottom of the sidebar. Changing it signs you out in your other browsers. Any role can do this.

A session lasts seven days and renews while you use it. Disabling a user, or resetting their password, signs them out everywhere.

Failed sign-ins

Rule	Limit
Account lockout	5 wrong passwords lock the account for 5 minutes
Rate limit	5 sign-in attempts per minute from one address

Every failed sign-in shows up in Activity with the username tried and the address it came from.