User Management

Required permission: users.read (all groups); write actions require users.write or specific support permissions

The Users page lets you search, inspect, and take action on all platform accounts — clients, notaries, and organisation members.

Finding a User

1. Go to the Users section from the dashboard
2. Search by name, email, or user ID
3. Click a user to open their profile

User Profile View

The profile shows:

• Account details (name, email, type, join date)
• KYC status (clients)
• Approval status and SCN (notaries)
• Subscription plan and organisation membership
• Recent sessions
• Account flags or notes

Suspending a User

Suspension prevents login and blocks session participation.

1. Open the user's profile
2. Click Suspend Account
3. Select a reason and enter notes (visible in audit log, not shown to user)
4. Confirm

The user is logged out of all active sessions immediately. They see a "Your account has been suspended" message on their next login attempt.

Notary suspension via NPN registry (external suspension) is handled automatically by the ENR sync job — you do not need to manually suspend those cases unless you have additional reason.

Reinstating a User

1. Open the suspended user's profile
2. Click Reinstate Account
3. Confirm — the user can log in again immediately

Data Erasure Requests

Under the Nigeria Data Protection Act 2023 (NDPA), users can request deletion of their personal data. These requests appear in the erasure queue:

1. Go to Users → Erasure Requests
2. Open the request
3. Verify the user's identity and that no legal hold prevents erasure (e.g. active dispute, unresolved complaint)
4. Approve — the platform anonymises the user's personal data while retaining transaction records required for regulatory compliance (6-year retention period)
5. Or reject with a documented reason (e.g. active legal obligation to retain)

Erasure does not delete the account row — it anonymises it. Session records, certificate hashes, and audit logs are retained per the data retention policy.

Account Closure (User-Initiated)

If a user requests full account closure, follow the account closure plan in project-docs/account-closure-plan.md.