User Management
Users are people who have remote or local access to the system. They are identified by first name, last name, and email address; they are assigned a role and added to one or more groups before using the system. Users can be granted access to the Cold Vault, MPC, or both.
The user's role and group(s) are used by the system for various purposes, such as determining what policies apply to the user. As Custody Infrastructure's system permissions are policy-driven, a user's role and group(s) directly drive what actions that individual can perform on the system.
Groups are used to control the policies of multiple users at once.
View Users
View users by opening the User Management screen from the left-side navigation menu, then opening the User tab at the top of the screen.
Hovering over a row displays buttons for editing and deleting that user.

Add and Edit a User
Click the + button at the top of the screen. The Add new user window opens.
Input the following information:
- First Name and Last Name: The first and last name of the user.\
- Email: The user's email address.
- Role: Choose a role for the user from the drop-down list.
- Machine Access: Configure the user as either an "MPC only" or "Cold and MPC" user. A Cold and MPC type can access both the Cold Vault and MPC; they can approve and send funds according to system policies.
- User groups: Choose a user group for the user from the drop-down list. As a user can only be added to pre-existing groups, make sure to set up the group prior to creating the user.
- Users Public Key: The remote user provides the public key from the mobile app.

Click Create to save the user.