> ## Documentation Index
> Fetch the complete documentation index at: https://docs.idemeum.com/llms.txt
> Use this file to discover all available pages before exploring further.

# User onboarding

> Add new admin user to idemeum portal.

## How user onboarding works

With idemeum every new admin user is onboarded with a mobile app. Think about the mobile app as a hardware key - it is used to authenticate a user with MFA and handle all encryption / decryption with a key that resides in the mobile app.

## Add new admin user

<AccordionGroup>
  <Accordion title="1. Add user record in the portal" defaultOpen icon="browser">
    * Access your idemeum admin portal
    * Navigate to `Users` section and click `Add user`
    * All you need to do is to provide `First name`, `Last name`, and the `Email address`
    * Save new user record

    <Note>
      Now the user is in the `invited` state. User will receive a welcome email to the specified email address.
    </Note>
  </Accordion>

  <Accordion title="2. User installs idemeum mobile app" defaultOpen icon="mobile">
    Now new user downloads idemeum mobile app from Play Store or App Store, installs the app and verifies the same email address in the mobile application.
  </Accordion>

  <Accordion title="3. User scans the QR-code at your idemeum portal" defaultOpen icon="qrcode">
    User navigates to your idemeum cloud portal URL, scans the QR-code with idemeum mobile application, and approves login with biometrics.
  </Accordion>

  <Accordion title="4. Promote user to administrator" defaultOpen icon="arrow-turn-up">
    You can now promote user to administrator by locating the user record in the portal, clicking on `...` and choosing `Make admin`
  </Accordion>
</AccordionGroup>

## Delete or disable admin user

All you need to do to remove user access to idemeum is to disable or delete user. `Disable user` - block access but keep user record in the cloud. `Delete user` - remove user record from the cloud. You need to disable the user before deleting.

* Find the user record in idemeum directory for your parent tenant
* Click on `...` and then choose `Disable user`
* Click on `...` and choose `Delete user` if you want to permanently remove the user record