User management configuration settings

Manage your Mattermost users including their access permissions, groups, teams, channels, as well as their access to the System Console. Configure this feature in the System Console by going to User Management:

Users
Groups
Teams
Channels
Permissions
System roles

Users

Available in legacy Enterprise Edition E10/E20

Getting people set up with a Mattermost account is typically something that system admins do when deploying and configuring the Mattermost workspace. A Mattermost admin can provision Mattermost users using one or more of the following methods:

Enable account creation.
Use mmctl user create or Mattermost APIs to create user accounts.
Migrate user accounts from other collaboration systems and bulk load that user data into Mattermost.
Connect an authentication service to assist with user provisioning, such as AD/LDAP authentication or SAML authentication.

Manage active and inactive users, revoke all user sessions, access individual users to view their User ID, add users to other teams, and view the teams they are on and what their role is on a team.	System Config path: User Management > Users `config.json setting`: N/A Environment variable: N/A
Note: You can search for users by partial first name, last name, nickname, or username.

Identify a User’s ID

Users can be specified in Mattermost by username or user ID. Usernames automatically resolve when a match is detected. System admins can identify a user’s ID using the Mattermost API or mmctl.

Using the API

Use this method if you need to automate user-related tasks or integrate with external systems. Make an HTTP GET request to the following endpoint: https://your-mattermost-url/api/v4/users/username/username_here. Replace your-mattermost-url with the URL of your Mattermost instance and username_here with the username you are looking for. The API response contains a JSON object that includes the user’s ID among other details.

Using mmctl

If you prefer command-line tools, Mattermost offers mmctl for system administration. In a terminal window, use the following command to list all users and their IDs: mmctl user list to return a list of user IDs.

Deactivate user accounts

If you need to remove a user from your Mattermost deployment, you can deactivate the user account. Deactivated users have an inactive status, are logged out of Mattermost as soon as they are deactivated, and deactivated users can no longer log back in. While a user account is deactivated, you can manage the user’s role, password, and email address.

Deactivate a user account by selecting their role, then select Deactivate. You can re-activate that user account later by selecting Activate.

Groups

Available in legacy Enterprise Edition E20

Manage default teams and channels by linking AD/LDAP groups to Mattermost groups.	System Config path: User Management > Groups `config.json setting`: N/A Environment variable: N/A
See the AD/LDAP groups documentation for details.

Teams

Available in legacy Enterprise Edition E20

Manage team settings, including group synchronization for teams.	System Config path: User Management > Teams `config.json setting`: N/A Environment variable: N/A
See the using AD/LDAP synchronized groups to manage team or private channel membership documentation for details.

Channels

Available in legacy Enterprise Edition E20

Manage channel settings, including group synchronization on channels.

System Config path: User Management > Channels
config.json setting: N/A
Environment variable: N/A

Notes:

Channels can be deleted with all content, including posts in the database, using the mmctl channel delete tool.
You can search for channels by channel name or by channel ID.

Permissions

Note

Available only on Enterprise and Professional plans

Available in legacy Enterprise Edition E10/E20

Restrict actions in Mattermost to authorized users only.	System Config path: User Management > Permissions `config.json setting`: N/A Environment variable: N/A
See advanced permissions documentation for details

System roles

Available in legacy Enterprise Edition E10/E20

Restrict System Console access to authorized users only.	System Config path: User Management > System Roles `config.json setting`: N/A Environment variable: N/A
See additional system admin roles documentation for details