> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.hodi.host/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Admins and users: who can do what in Hodiploy?

|| The account owner is always an admin. They can promote any user of their client area from **Settings > Admins**. Hodi support, however, is not an admin by default.

## Two access levels

Hodiploy distinguishes two levels, modelled on Odoo.sh:

- **Admin**: the account owner and the users they promoted. Hodi support is one only if you grant it, see below.
- **User**: anyone else invited on the account.

Users see everything, and on non-production instances they can do almost everything: create, modify, duplicate, back up or restore, read the logs, open the shell, manage a remote database access.

## What is reserved to admins

- **Locking and unlocking an instance.** The lock is a guard against accidental changes: while it is set, the instance can be neither modified nor deleted, by anyone, admins included.
- **Everything that touches a production instance**: its configuration, the shell, the application logs, backups and imports, duplication, remote database access, updates, and the Odoo users' passwords. The activity log, though, stays readable by everyone. Outside production, everyone can do all of that.

An instance is "production" through the checkbox of the same name in its form, on creation as well as when editing; only an admin can tick or untick it. The restriction does not depend on the lock: an admin can unlock a production instance for an intervention without opening anything up to users.
- **Restoring a deleted instance**, which brings it back with all its data.
- **The server settings**: the list of admins, the firewall (SSH and web access) and the server SSH keys.

For users, these actions stay visible but greyed out. A greyed button is not a bug: ask an admin of your account. The server settings, though, only appear for admins.

## Hodi support

When our support signs in to your server to help you, it comes in as a **user**, not an admin: your production instances stay closed to it, just as they would to a user of your client area.

If you ask us to work on a production instance, tick **Grant admin rights to Hodi support** in **Settings > Admins**, then untick it once we are done. Both the grant and the withdrawal are recorded in the activity log, with their date and author.

## Inviting, then promoting a user

Users are not invited from Hodiploy but from your Hodi client area: [how do I give a user access to my account?](https://help.hodi.host/en/article/how-do-i-give-a-user-access-to-my-account-and-manage-their-permissions-aqaxff/)

This is also what makes offboarding simple: no need to go through every server. Remove the person's access in your client area, and they no longer have access to anything.

Once the user is invited, an admin can promote them in **Settings > Admins** by entering the e-mail address of their client area account. Removing them from the list makes them a user again; every promotion and removal is recorded in the activity log.