Members and access
Configure signup domains, roles, session revocation, and super-user protection.
GitHub OAuth supplies identity. Tasuku checks verified GitHub email addresses only when deciding whether a new user may sign up; email addresses are not stored or logged.
Signup domain matching
TASUKU_AUTO_SIGNUP_DOMAINS is a comma-separated list of exact domains. Matching is case-insensitive. A parent domain does not grant access to subdomains.
TASUKU_AUTO_SIGNUP_DOMAINS=example.com,engineering.example.comAn empty value disables first-time signup. Changing the list does not disable an already active member.
Roles
| Role | Capabilities |
|---|---|
USER | View repositories, reviews, workflows, events, agent tasks, analytics, and learnings. |
ADMIN | User capabilities plus repository, runtime, MCP, skill, secret, and learning management. |
SUPER_USER | Admin capabilities plus GitHub App and member management. |
The first admitted user becomes SUPER_USER; later users begin as USER.
Disabling access
Disabling a member transactionally revokes all active sessions. Re-enabling access does not restore those sessions; the user signs in again.
Tasuku allows multiple super users but prevents demoting or disabling the last active one. This protects the instance from losing all principals who can manage GitHub identity and membership.
Membership changes are retained for audit in the dashboard and API.