User Management

Required permission: users.read (all groups); write actions require users.write or specific support permissions

The Users page lets you search, inspect, and take action on all platform accounts — clients, notaries, and organisation members.

Finding a User

1. Go to the Users section from the dashboard
2. Search by name, email, or user ID
3. Click a user to open their profile

User Profile View

The profile shows:

• Account details (name, email, type, join date)
• KYC status (clients)
• Approval status, SCN, and suspension status (notaries)
• Subscription plan and organisation membership
• Recent sessions
• Account flags or notes

Suspension Status in the Table

The User Management table shows an Active / Inactive badge for all users. For suspended notaries, an additional orange Suspended badge appears alongside it. This lets you identify suspended notaries at a glance without opening the drawer.

Suspension Status in the Drawer

When you open a notary's profile drawer, the hero section shows a red Suspended badge if the notary is currently suspended. The Account Suspension section at the bottom of the drawer shows the current suspension status and reason. Reinstatement actions for notaries are managed through the Notary Approvals tab (see below).

Suspending a User

Client suspension is managed here. Notary suspension is managed via Notary Approvals — the Suspend button in this panel does not apply to notary accounts.

To suspend a client account:

1. Open the client's profile
2. Click Suspend Account
3. Select a reason and enter notes (visible in audit log, not shown to user)
4. Confirm

The user is logged out of all active sessions immediately. They receive an account suspension notification.

Notary suspension via the NPN registry (external suspension) is handled automatically by the ENR sync job — you do not need to manually suspend those cases unless you have additional reason to act.

Reinstating a User

Clients: Open the suspended client's profile → click Reinstate Account → confirm. The client can log in again immediately.

Notaries: Reinstatement is done from the Notary Approvals drawer, not from this panel. The Account Suspension section in the notary's drawer here shows their current status for reference only. Any admin with approvals.write can reinstate a notary — it does not need to be the same admin who issued the suspension.

Data Erasure Requests

Under the Nigeria Data Protection Act 2023 (NDPA), users can request deletion of their personal data. These requests appear in the erasure queue:

1. Go to Users → Erasure Requests
2. Open the request
3. Verify the user's identity and that no legal hold prevents erasure (e.g. active dispute, unresolved complaint)
4. Approve — the platform anonymises the user's personal data while retaining transaction records required for regulatory compliance (6-year retention period)
5. Or reject with a documented reason (e.g. active legal obligation to retain)

Erasure does not delete the account row — it anonymises it. Session records, certificate hashes, and audit logs are retained per the data retention policy.

Account Closure (User-Initiated)

If a user requests full account closure, follow the account closure plan in project-docs/account-closure-plan.md.