Skip to main content
The dashboard’s Team page is available to administrators. It manages the two supported roles: admin and operator.

​
Access model

Campaign authorization is ownership-based for operators. Requests for a campaign owned by another operator are returned as not found; administrators can access all campaigns.

​
Create an account

Open Team, select New User, and provide a unique username, email address, and role. P-BitM generates a strong temporary password and returns it only in the creation response. The dashboard displays that credential after creation; copy it then and transfer it through an approved secret-sharing channel.
P-BitM does not retain a recoverable plaintext copy of a generated password. Do not place it in tickets, chat history, campaign content, or documentation.

​
Update and revoke access

An administrator can change a user’s email or role, enable or disable the account, generate a replacement temporary password, or delete the account. Role changes, activation changes, and password resets revoke the affected user’s existing dashboard sessions. The account protections prevent an administrator from:
  • disabling or deleting their own account;
  • demoting, disabling, or deleting the last active administrator.
Deleting another user permanently removes the account and transfers campaigns created by that user to the administrator performing the deletion.

​
CLI administration

The CLI provides non-dashboard recovery and account-management commands:
See the CLI reference before using destructive user commands.
Last modified on August 28, 2026