root user: can create users has all permissions able to view audit log various permissions (refer User Model) view in console who sent command add permission groups that can be assigned to users audit log more info: #23
