Users and roles

The first production setup creates one Instance Owner. The Instance Owner manages local accounts, system diagnostics, and the audit log. Regular users connect and use their own repositories without administrator approval.

New users receive a one-time start password and must replace it on first login. Accounts can be disabled, reactivated, or reset by the Instance Owner.

Session collaborators and viewers remain invite-bound and do not receive a general Sketchblock workspace.