User Types and Privileges

User Types in the Institutional Vault

There are two user types in the Institutional Vault:

Users (Human Users): These are individuals who authenticate through their Identity Provider (IdP) to access the UI and initiate interactive UI operations.
System Users: These are users created for programmatic access, typically for automated systems or applications interacting with the wallet via the API. They authenticate via API Keys. System Users are managed by administrators and can have specific roles. System Users can only initiate operations and can not approve or reject them.

Each user type can be assigned one of the following roles:

Admins have the highest authority in the Institutional Vault and can create Users and System Users with assigned roles.
MarketOps users can manage trading operations, transfers, and asset monitoring.
Viewer users can view transaction history and export data without making any changes to the system.

The table below outlines the privileges available to Admins, MarketOps and Viewer:

Feature	Admin	MarketOps	Viewer
Backup Key	✅	❌	❌
View Vault	✅	✅	❌
Create Vault	✅	✅	❌
View Asset	✅	✅	✅
Create Asset	✅	✅	❌
Update Asset	✅	✅	❌
Manage Exchange Rate	✅	❌	❌
View User Info	✅	✅	✅
View User List	✅	❌	❌
Create User	✅	❌	❌
Update User	✅	❌	❌
Delete User	✅	❌	❌
View System User	✅	❌	❌
Create System User	✅	❌	❌
Delete System User	✅	❌	❌
View Group	✅	❌	❌
Create Group	✅	❌	❌
Update Group	✅	❌	❌
View Policy	✅	❌	❌
Create Policy	✅	❌	❌
Update Policy	✅	❌	❌
Delete Policy	✅	❌	❌
View Audit	✅	❌	❌
Update Notification	✅	✅	✅
View Notification	✅	✅	✅
Create Transaction	✅	✅	❌
View Transaction	✅	✅	✅
View Staking	✅	✅	✅
Create Staking	✅	✅	❌
Freeze Wallet	✅	❌	❌
Update Vault	✅	✅	❌
Create Public Key	✅	❌	❌
View Public Key	✅	❌	❌