> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aeon.so/llms.txt
> Use this file to discover all available pages before exploring further.

# Add a User

> Step-by-step guide to add new users to your workspace

## Prerequisites

<Warning>
  For private beta access, ensure all new user email addresses and MetaMask
  addresses are whitelisted with the Aeon team before adding them.
</Warning>

## User Roles

Your workspace supports different user roles that determine what actions users can perform:

<CardGroup cols={3}>
  <Card title="Admin" icon="crown">
    **Full workspace control** including user management and policy changes
  </Card>

  <Card title="Trader" icon="pen-to-square">
    **Can approve and sign transactions** based on configured policies
  </Card>

  <Card title="Viewer" icon="eye">
    **Read-only access** to view transactions, balances, and workspace activity
  </Card>
</CardGroup>

## Authentication Methods

Choose the authentication method that best fits your team's needs:

<CardGroup cols={2}>
  <Card title="Google zkLogin" icon="google">
    **Uses Google accounts** with zero-knowledge proofs for privacy
  </Card>

  <Card title="MetaMask" icon="wallet">
    **Decentralized authentication** using Ethereum wallet signatures
  </Card>
</CardGroup>

## Add User Process

<Tabs>
  <Tab title="Gmail Users (Google zkLogin)">
    <Steps>
      <Step title="Initiate User Addition">
        Go to **Settings** → **Users** in the Aeon web app, then click **"Add User"** and select **Gmail address** for Google zkLogin authentication. Provide the user's Gmail address that will be used for authentication.
      </Step>

      <Step title="Configure User Permissions">
        Set up the user's role and specific permissions:

        * Account access (which vault accounts they can see/use)
        * Transaction limits and approval capabilities
        * Role assignment (Admin, Trader, or Viewer)
      </Step>

      <Step title="Generate and Share Confirmation">
        The system generates a unique confirmation code. Securely share this code with the new user through a separate communication channel (email, Slack, etc.).
      </Step>

      <Step title="User Completes Setup">
        The new user must:

        1. Open the confirmation email from Aeon
        2. Enter the confirmation code you provided
        3. Install and configure the Aeon mobile signer
        4. Scan the QR code with their mobile signer to complete setup
      </Step>

      <Step title="Key Material Sharing">
        After setup completion, existing signers will receive prompts to share key material with the new user to enable transaction signing.
      </Step>
    </Steps>
  </Tab>

  <Tab title="MetaMask Users">
    <Steps>
      <Step title="Initiate User Addition">
        Go to **Settings** → **Users** in the Aeon web app, then click **"Add User"** and select **MetaMask wallet address** for decentralized authentication. Provide the user's Ethereum wallet address from their MetaMask wallet.
      </Step>

      <Step title="Configure User Permissions">
        Set up the user's role and specific permissions:

        * Account access (which vault accounts they can see/use)
        * Transaction limits and approval capabilities
        * Role assignment (Admin, Trader, or Viewer)
      </Step>

      <Step title="Generate and Share Invitation">
        The system creates a workspace invitation link. Provide this invitation link to the new user through a secure communication channel.
      </Step>

      <Step title="User Completes Setup">
        The new user must:

        1. Click the invitation link
        2. Connect their MetaMask wallet to authenticate
        3. Install and configure the Aeon mobile signer
        4. Complete the mobile signer setup process
      </Step>

      <Step title="Key Material Sharing">
        After setup completion, existing signers will receive prompts to share key material with the new user to enable transaction signing.
      </Step>
    </Steps>
  </Tab>
</Tabs>

<Note>
  Both authentication methods require the new user to install the Aeon mobile
  signer and receive key material shares from existing workspace members to
  participate in transaction signing.
</Note>

## Authentication Methods Comparison

<CardGroup cols={2}>
  <Card title="Google zkLogin" icon="google">
    **Best for**: Teams already using Google Workspace <br />
    **Benefits**:
    <br />- Seamless integration with existing Google accounts <br />-
    Hardware-backed authentication on supported devices <br />- Familiar user
    experience <br />
    **Requirements**:
    <br />- Valid Gmail address <br />- Google account with 2FA enabled
    (recommended)
  </Card>

  <Card title="MetaMask" icon="wallet">
    **Best for**: Crypto-native teams and censorship resistance <br />
    **Benefits**:
    <br />- Decentralized authentication <br />- No dependency on centralized
    identity providers <br />- Full user control over authentication keys <br />
    **Requirements**:
    <br />- MetaMask wallet installed <br />- Ethereum address for
    identification
  </Card>
</CardGroup>

## Key Material Sharing

When new users join your workspace, they need access to key material to participate in transaction signing.

### Sharing Process

<Steps>
  <Step title="Automatic Prompt">
    After a new user completes onboarding, existing signers receive a prompt to
    share key material
  </Step>

  <Step title="Select Sharers">
    Choose which existing users will share their key material with the new user
  </Step>

  <Step title="Approve Sharing">
    Each selected user must approve the key sharing using their Aeon mobile
    signer
  </Step>

  <Step title="New User Acceptance">
    The new user receives and accepts the shared key material
  </Step>
</Steps>

<Note>
  Key material sharing is cryptographically secure and doesn't expose private
  keys to other users or Aeon's infrastructure.
</Note>

{" "}