Skip to main content
User management is in Settings → Users. Inviting and editing users requires Admin access. From here you can invite new users, change roles, configure default subscribers, and manage service accounts for API access.

​
Inviting Users

1

Go to Settings → Users

Select Add User.
2

Enter the user's details and role

Enter the user’s name and email, check Invite to VISO TRUST, and select their role: Admin, Program Manager, Contributor, or Viewer. See Role-Based Access for a breakdown of what each role can do.
3

Send the invitation

The user receives an email with a link to set up their account. If SSO is configured, their first login must go through your SAML identity provider — social logins (Google, Microsoft) work after the first successful SSO login.

​
Changing a User’s Role

From Settings → Users, select the three-dot menu next to any user and select Edit. Update their role and save. Role changes take effect immediately.

​
Removing a User

Select the three-dot menu next to the user and select Delete. If the user has relationship subscriptions, Business Owner assignments, or Assessment Lead assignments, the delete dialog prompts you to reassign them first. Select another user to receive the assignments, then select Reassign and Delete Contact. These counts include archived relationships, so a user may need reassignment even if they own nothing in your active portfolio. Removing a user:
  • Revokes their platform access immediately
  • Does not delete their past activity, comments, or audit trail entries

​
Default Subscribers

A Default Subscriber is automatically subscribed to every relationship in the organization — existing and future. Use this for centralized risk or compliance teams that need visibility across the entire vendor portfolio. To enable:
  1. Select the three-dot menu next to the user → Edit
  2. Check Default Subscriber
  3. Select Save
The change is immediate — the user is added as a subscriber to all current relationships and any new ones going forward.
A Default Subscriber cannot be removed from an individual relationship unless the Default Subscriber setting is first unchecked on their user profile.
You can configure multiple Default Subscribers. See Inviting Your Team for more context on how to use this feature.

​
Business Units

Every user belongs to a Business Unit, which is set when they’re created or edited. Business Units determine which unit a relationship is attributed to when the user is assigned as Business Owner. To manage Business Units, go to Settings → Business Units. See Business Units for details.

​
Service Accounts for API Access

If you’re using the VISO TRUST API for automation or integration, use a dedicated service account rather than a personal user account. This ensures API access isn’t tied to an individual’s employment status and makes it easier to manage token lifecycle. To create a service account:
  1. Invite a new user with a service account email (e.g., viso-api@yourorg.com)
  2. Assign the Admin or Program Manager role — the API endpoints require program-level access
  3. Log in as that user to generate an API token from the user profile
See Authentication for API token generation and usage.

​
User Activity and Audit Trail

All user actions that affect relationships, assessments, and settings are recorded in the platform’s audit trail. This includes who created a relationship, who uploaded an artifact, who accepted risk, and who changed a setting. The activity log for a relationship is visible in its Activity tab. Organization-level audit logs are available to Admins on request.