diff --git a/lib/admin/bundled-plugins.ts b/lib/admin/bundled-plugins.ts
index 9b57eb9f..1204f63e 100644
--- a/lib/admin/bundled-plugins.ts
+++ b/lib/admin/bundled-plugins.ts
@@ -71,6 +71,10 @@ const FIRST_PARTY_PLUGINS: FirstPartyPlugin[] = [
   // feature - the former in-host native pipeline is gone - so the long-standing
   // `smimeEnabled` policy gate now controls this plugin.
   { id: 'smime', gate: 'smimeEnabled', forceEnable: true },
+  // VNCdirectory deep-link. Users are managed in the directory, not the
+  // webmail; this plugin adds a "User management" Settings entry that opens
+  // the directory's user list. Force-enabled so it is always present.
+  { id: 'manage-users', gate: 'manageUsersEnabled', forceEnable: true },
 ];
 
 const ID_RE = /^[a-z0-9][a-z0-9-]*[a-z0-9]$/;
diff --git a/lib/admin/types.ts b/lib/admin/types.ts
index 612f29f0..8aabdef8 100644
--- a/lib/admin/types.ts
+++ b/lib/admin/types.ts
@@ -55,6 +55,7 @@ export interface FeatureGates {
   calendarEnabled: boolean;
   calendarTasksEnabled: boolean;
   smimeEnabled: boolean;
+  manageUsersEnabled: boolean;
   externalContentEnabled: boolean;
   debugModeEnabled: boolean;
   folderIconsEnabled: boolean;
@@ -90,6 +91,7 @@ export const DEFAULT_FEATURE_GATES: FeatureGates = {
   calendarEnabled: true,
   calendarTasksEnabled: true,
   smimeEnabled: true,
+  manageUsersEnabled: true,
   externalContentEnabled: true,
   debugModeEnabled: true,
   folderIconsEnabled: true,