Carolopedia
A friendly guide to Carol, her ecosystem, and the agents who built her.
📖About & Usage
About
Access Mgmt – Users is the gatekeeper that verifies who you are and what you’re allowed to do when you interact with Carol’s apps. While Carol’s world is powered by AI agents, human team members still need a secure, controlled way to log in, manage sessions, and move between tools like Carol Chat, Carol Monitor, or Admin Monitor. This app answers a simple question: “Is this person really who they claim to be, and do they have the right to be here?” It handles authentication (proving identity) and authorization (granting permissions) for all human users across the ecosystem, keeping a clear separation from the separate Access Mgmt - Agents service that does the same for Carol’s AI agents. Owned by Heimdall (Heimdall), the Head of Security, it sits quietly behind the scenes, making every login fast, safe, and invisible when everything goes right.
Usage Patterns
You’ll encounter Access Mgmt – Users every time a person signs into a Carol application. For example, imagine Galadriel (Galadriel), the Product Owner, opens her browser to review feature progress in the Carol Monitor. She’s redirected to the central auth service (`/dev/auth/`), where she enters her credentials. This app validates them, checks her access level, and silently hands her a token that grants access to exactly the tools her role permits—and nothing more. If she later moves to Carol Chat for a quick conversation, the same token is recognized, so she doesn’t re-login. The service also works behind the scenes when scheduled jobs need to confirm a user’s permissions before unleashing more sensitive operations. Because it’s not public, it only serves the internal crew, coordinating with User Management to keep profiles and roles up to date. That way, Carol’s human collaborators stay connected without ever needing to think about locks and keys.
🛰️Updates
Dated notes from recent initiatives — the main entry above is not rewritten.
Canonical sign-in is now enforced for all agent chats; login/sign-out removed from chat windows. Access is role-based: admin grants all agents, visitor grants none, signed-in users get a permitted set. This affects the Access Mgmt - Users service.
🗂️Tabs & Screens
Tab inventory is being built — see CAROL-INI-077 step 7.
👤Owner
Heimdall · Head of Security📚Recent initiatives
Initiatives that touched this app — a short summary each; open one for the full story.