A4 Users - Admin Design Comp v0.1

Right Quote v1 - Admin tab 4 of 4 - App user management (Azure SSO identities)
Status: Draft for Avi handoff  |  Date: 2026-05-29  |  Parent ticket: PEA-48  |  Role view: Agency admin (Mike) - sees agency users only  |  Source spec: a4-users.md
State A - Users list (default landing on /admin/users)
Admin

Users

App users authorized to access Right Quote. Identity comes from Azure SSO; permissions managed here.
No local passwords. Identity is owned by Azure Entra; deactivating a user revokes Right Quote access immediately via session security version. spec X0.6
All Active Pending Inactive Showing 7 of 7
Name Email App role Access status Agency Last login Actions
Brittany Cole brittany@safelife.com agent Active Safe Life 2026-05-29 09:42
Donna Rivera donna@safelife.com security_admin Active Safe Life 2026-05-29 08:11
Kaisha Brown kaisha@safelife.com admin Active Safe Life 2026-05-28 17:35
Marcus Powell marcus@gmail.com agent Pending Safe Life Never
Mike Killimett mike@safelife.com super_admin Active Safe Life 2026-05-29 07:55
Richie Davis richie@safelife.com agent Active Safe Life 2026-05-29 10:02
Tom Barnett tom@safelife.com agent Inactive Safe Life 2026-04-12 14:20
State B - + Provision user modal (SSO-aware, no password)
Admin

Users

Provisioning a new user
+ Provision user
User completes provisioning by signing in with their work email via SSO.
No password is created. When this user signs in via Azure SSO for the first time, their access status flips from Pending → Active and their Azure identity is linked to this record.
Must match the user's Azure work account email.
Granting super_admin requires elevated permission.
Default Pending until first SSO login completes.

Design notes

Source spec ACs covered visually

Out of scope reminders

Cross-links