> **Can't find what you're looking for?** Use `search_docs` on the docs MCP server at `https://docs.prividium.com/api/mcp` to find what you need.
>
> **Have feedback?** Use `submit_feedback` on the same MCP server.

## Managing Users

Users represent individual identities that can access your Prividium™ network. Each user can authenticate through
**Okta**, a **crypto wallet**, or both. Administrators manage users from the **Admin Dashboard**.

### 1. Open the Users page

1. Go to the **Admin Dashboard** at `http://localhost:3000`.
2. Select **Users** from the sidebar.
3. Review the list of users, linked wallets, and assigned roles.

### 2. Add a new user

1. Click **Create User** (or **Add User**).
2. **User Information**:
   * **Display Name** (Required): Enter a name to identify the user (e.g., `user@example.com` or `John Doe`).
3. **Role Assignment**:
   * Use the **Search roles...** input to find roles.
   * Select one or more roles to assign to this user.
4. **Wallet Addresses**:
   * Click **+ Add Wallet**.
   * Enter a valid Ethereum address (starting with `0x` followed by 40 hex characters).
   * You can add multiple wallets by clicking the button again.
5. Click **Create User** to save.

The user can now log in through the **User Dashboard** at `http://localhost:3001` (or your configured user panel URL)
using their wallet.

### 3. Edit an existing user

1. Find the user in the list and click the **pencil icon** (Edit).
2. Update the **Display Name**, **Role Assignment**, or manage **Wallet Addresses**.
3. Click **Save**.

> Note: If a user is synced from an external IdP (like Okta), some fields might be managed externally.

### 4. Remove a user

1. Locate the user and select **Remove** (or delete icon).
2. Confirm the deletion.

Removing a user also revokes their linked wallets and role assignments. If they authenticate again (e.g., via a
previously linked wallet if the restriction is lifted), a new user entry might be created depending on system
configuration.

### 5. Link multiple wallets

You can link more than one wallet address to the same user profile. This is useful for users who transact from different
accounts but should have the same permissions.

1. Open **Users**, then click **Edit** on the target user.
2. In the **Wallet Addresses** section, click **+ Add Wallet**.
3. Enter the new address.
4. Click **Save**.

All linked wallets inherit the same role-based permissions assigned to the user. A user can have at most 100 linked
wallets by default.

### 6. Assign roles to users

Roles determine what actions a user can perform on your Prividium™ network.

1. Go to the **Users** page.
2. Click **Edit** (or Create) a user.
3. In the **Role Assignment** section, search for and select the desired roles.
4. Click **Save** / **Create User**.

Each user's permissions are determined by the combined privileges of their assigned roles. Changes take effect
immediately.

> Tip: Use the **Roles** page to define or update roles before assigning them here.

> The **Users** page lists zone users. An organization member's roles are managed from the organization view (open the
> organization, then the member); the selectable roles are that organization's own roles, including its Admin role.

### 7. View a user's organization

Each user belongs to at most one organization. The user's detail page shows their current organization under the
**Organization** section.

1. Open the **Users** page and click a user to open their detail page.
2. The **Organization** section displays the organization name as a link, or **None** if the user is not a member of any
   organization.
3. Click the organization name to navigate to its detail page.

To assign a user to an organization, use the **Organizations** page. See
[Manage Organizations](/configuring/chain/organizations).

### 8. User types

| Type            | Authentication               | Managed From             | Notes                           |
| --------------- | ---------------------------- | ------------------------ | ------------------------------- |
| **Okta user**   | Okta SSO                     | Okta and Admin Dashboard | Linked by Okta subject ID       |
| **Wallet user** | SIWE (Sign-In with Ethereum) | Admin Dashboard          | Identified by wallet address    |
| **Hybrid user** | Okta and SIWE                | Admin Dashboard          | Can use either method to log in |

### 9. Organization membership

Users can belong to an organization. A user can only be a member of one organization at a time. Organization membership
can be managed from the organization detail page or programmatically through M2M applications.

See [Organizations](/configuring/chain/organizations) for details on creating organizations and managing members.

***

### Tips

* Use **roles** to group access by responsibility, then assign users to those roles.
* Keep at least two **Admin** users to avoid lockout.
* For production, restrict who can add or remove users through role policy.

***