> ## Documentation Index
> Fetch the complete documentation index at: https://docs.visotrust.com/llms.txt
> Use this file to discover all available pages before exploring further.

# User Management

> Invite users to VISO TRUST, change their roles, configure default notification subscribers, and create service accounts for API access.

User management is in **Settings → Users**. Inviting and editing users requires Admin access. From here you can invite new users, change roles, configure default subscribers, and manage service accounts for API access.

## Inviting Users

<Steps>
  <Step title="Go to Settings → Users">
    Click **Add User**.
  </Step>

  <Step title="Enter the user's details and role">
    Enter the user's name and email, check **Invite to VISO TRUST**, and select their role: **Admin**, **Program Manager**, **Contributor**, or **Viewer**. See [Role-Based Access](/getting-started/roles-and-permissions) for a breakdown of what each role can do.
  </Step>

  <Step title="Send the invitation">
    The user receives an email with a link to set up their account. If SSO is configured, their first login must go through your SAML identity provider — social logins (Google, Microsoft) work after the first successful SSO login.
  </Step>
</Steps>

## Changing a User's Role

From **Settings → Users**, select the three-dot menu next to any user and select **Edit**. Update their role and save. Role changes take effect immediately.

## Removing a User

Select the three-dot menu next to the user and select **Delete**. Removing a user:

* Revokes their platform access immediately
* Does not delete their past activity, comments, or audit trail entries
* Does not automatically reassign relationships they own as Business Owner — update Business Owner assignments separately

## Default Subscribers

A **Default Subscriber** is automatically subscribed to every relationship in the organization — existing and future. Use this for centralized risk or compliance teams that need visibility across the entire vendor portfolio.

To enable:

1. Select the three-dot menu next to the user → **Edit**
2. Check **Default Subscriber**
3. Click **Save**

The change is immediate — the user is added as a subscriber to all current relationships and any new ones going forward.

<Warning>
  A Default Subscriber cannot be removed from an individual relationship unless the Default Subscriber setting is first unchecked on their user profile.
</Warning>

You can configure multiple Default Subscribers. See [Inviting Your Team](/getting-started/inviting-your-team) for more context on how to use this feature.

## Business Units

Every user belongs to a Business Unit, which is set when they're created or edited. Business Units determine which unit a relationship is attributed to when the user is assigned as Business Owner.

To manage Business Units, go to **Settings → Business Units**. See [Business Units](/third-parties/business-units) for details.

## Service Accounts for API Access

If you're using the VISO TRUST API for automation or integration, use a dedicated service account rather than a personal user account. This ensures API access isn't tied to an individual's employment status and makes it easier to manage token lifecycle.

To create a service account:

1. Invite a new user with a service account email (e.g., `viso-api@yourorg.com`)
2. Assign the **Admin** or **Program Manager** role — the API endpoints require program-level access
3. Log in as that user to generate an API token from the user profile

See [Authentication](/api-reference/authentication) for API token generation and usage.

## User Activity and Audit Trail

All user actions that affect relationships, assessments, and settings are recorded in the platform's audit trail. This includes who created a relationship, who uploaded an artifact, who accepted risk, and who changed a setting.

The activity log for a relationship is visible in its **Activity** tab. Organization-level audit logs are available to Admins on request.