The command line utility requires operating system privileges in order to operate. So as to control who can or cannot use the utility, the utility requires that the operator either have the necessary operating system privileges or that they have a popstore account which has the manage flag set. (The manage flag is also required to use the web-based management interface.) Thus, a user lacking operating system privileges can use the utility to manage the popstore provided that a privileged user first creates them an account and grants that account the manage flag:

popstore> add oper -password=secret -owner="popstore operator" -flag=manage

In the above command, a privileged popstore account named oper with password secret is created. The account's privileges can then be used to manage the popstore via the login command:

popstore> login oper Password: secret Login succeeded; management capabilities enabled popstore>

Once logged in, the utility will allow the user to perform management functions on any account within the same management group and user domain as the user. If the user's account is in no management group --- that is has a zero length group name --- then the account can manage all accounts within the same user domain. If the user's account is in no management group and is in the default user domain, then the user can manage all accounts in all groups and all user domains.