Service Layer high complexity backend
3
Dependencies
4
Dependents
10
Entities
0
Integrations

Description

The core backend service handling all user lifecycle operations within the admin panel. Enforces multi-tenancy boundaries so that each administrator can only operate on users within their authorized organization scope, and orchestrates invitation dispatch, role assignment, and soft-deactivation workflows.

Feature: User Management

user-management-service

Responsibilities

  • List users scoped to the requesting admin's organization and role
  • Validate and process user invitation requests including token generation
  • Enforce role hierarchy rules preventing privilege escalation
  • Execute soft-deactivation by setting status flag and logging to audit trail

Interfaces

listUsers(adminUserId, organizationId, filters)
getUserById(userId, adminUserId)
inviteUser(email, role, organizationId, associationId)
resendInvitation(invitationId)
revokeInvitation(invitationId)
assignRole(userId, role, organizationId)
removeRole(userId, assignmentId)
deactivateUser(userId, reason, adminUserId)
reactivateUser(userId, adminUserId)
getUserImpactSummary(userId)
validateAdminScope(adminUserId, targetUserId)