Manage who can sign into the pipeline. Three layers: admin emails (env-managed, always allowed and granted god-view), DB allowlist (live-edited here), and a legacy environment list (read-only, kept for backwards compatibility).
Add or remove emails permitted to log in. Changes take effect immediately — no restart needed.
Configured via the ADMIN_EMAILS environment variable. Always allowed; bypasses every other gate; granted god-view of all tenants. Edit .env and restart to change.
Pre-existing env-driven allowlist. Kept for backwards compatibility — prefer adding new emails to the DB allowlist above.
Everyone who has logged in at least once. Shows when they were added and last seen.