Users

The Users page lists all participant users provisioned on this validator and allows creating new users with configurable rights.

The Users page manages participant users on this validator.

Participant users are accounts that can interact with the Canton Ledger API. Each user has a set of rights that define which parties they can act as, read as, or execute as.

---

User Table

The table can be viewed in Table or Matrix layout using the toggle in the top-right of the page.

Table

The default Table view shows:

Column	Description
User ID	The unique identifier for this user on the participant. A copy icon allows copying the full value.
Primary party	The party that this user is primarily associated with. May be empty if no primary party is set.
Identity provider	The identity provider configured for this user (e.g. default).
Active	Whether this user account is currently active.

Matrix

Click the > arrow on any row to view or edit the user's details and rights.

---

Creating a User

The + Create user button in the top-right opens the Create user dialog.

Basic Info

Field	Description
User ID	A unique identifier for the new user within this validator (e.g. analyst-01). Must be unique on this participant.
Primary party (optional)	The party to associate with this user as their primary party. Leave blank to provision the user without a default party.

Rights

Rights control which parties this user can interact with on the ledger. Three presets are available:

Preset	Description
Read-only viewer	[TODO: document the rights granted by this preset]
Active trader	[TODO: document the rights granted by this preset]
Admin	[TODO: document the rights granted by this preset]

Rights can also be configured manually using the following fields:

Field	Description
Can act as	Parties the user can submit transactions on behalf of. Search by party ID prefix.
Can read as	Parties whose ledger projection the user can read. Search by party ID prefix.
Can execute as	Parties for which the user can execute prepared submissions. Search by party ID prefix.

Global Flags

Flag	Description
Participant admin	Grants the user the ability to manage users, parties, and DARs on this participant.
Identity provider admin	Grants the user the ability to configure the identity provider.
Can read as any party	Allows the user to read every party's ledger projection on this participant.
Can execute as any party	Allows the user to execute prepared submissions on behalf of any party.