User access

Aletsaf Administration

Assign ordinary OAuth and OIDC clients to users. Client assignment is required before consent, authorization codes, refresh tokens, or device approval can succeed.

Client assignments

Assignments control whether a user may use a client at all. Scope consent and client-to-resource access remain separate controls.

Aletsaf Account is available automatically to every active user. Aletsaf Administration is available automatically only to active administrators. System clients are not stored as editable assignments.