Users & Access

Vapor uses a robust Role-Based Access Control (RBAC) system to manage what local users and API integrations can accomplish on the host.

Local Users

To create and manage users:

1. Navigate to System > Users.
2. You will see a list of existing users.
3. Click Add User to create a new local user. You will need to provide a username and initial password.

Users can also reset their own passwords from their profile section.

API Tokens

For automation scripts, integrations, or utilizing the CLI, it's recommended to create a dedicated API token rather than passing user credentials.

Generating an API Token

1. Click on API Token in the navigation menu.
2. Click Generate Token.
3. Copy the token immediately! It will not be shown again.

WARNING

Treat your API tokens like passwords. Do not commit them into public repositories. If a token is compromised, you can revoke it directly from the API Token management page.