Manage Users

Fireblocks users can be added either via the web console or via the API:

  • For adding users via the console please refer to this guide
  • For adding users via the API please refer to the following API endpoints Generally, there are different user roles that can be assigned to a specific user, please see the user role table below:

First, we need to understand the user permissions. Each user role contains other capabilities in addition to transaction permissions.

API Key TypeRoleTransaction PermissionsEnvironment
AdminSigningCan sign transactions.Production
Non-Signing AdminNon-SigningCan't sign transactions.Production + Sandbox
SignerSigningCan sign transactions.Production
ApproverNon-SigningCan't sign transactions.Production
EditorNon-SigningCan't sign transactions.Production + Sandbox
ViewerView-OnlyCan only view transaction history.Production + Sandbox
NCW_ADMINNon-SigningCan only manage Non Custodial Wallets.Production + Sandbox
NCW_SIGNERSigningCan only sign transaction from Non Custodial Wallets.Production + Sandbox

Defining users in your workspace may seem straightforward, but it requires careful alignment with the supported roles.

Whether your goal is maximum security or optimal work efficiency, the right approach depends on your specific business use cases.

Before getting started, familiarize yourself with user groups and approval groups . These two features are crucial for defining user roles and actions in your Fireblocks workspace and can significantly enhance your operational efficiency and security.

  • Segregate users into two categories: those responsible for managerial decisions and changes, and those handling day-to-day operations. Differentiating between users who can make changes in the workspace and those who can only initiate or sign transactions will enhance security. For more details, refer to this guide .
  • Always consider the admin quorum approval. The more approvals required for a workspace change, the longer and more complex the implementation process will be.
  • Start by defining groups and their tasks. Based on these tasks, identify the roles that match and add individual users accordingly. Managing your operations with the correct setup of groups will enhance the performance of regular operations and facilitate general workspace changes.

Follow the general best practices when choosing users and roles as outlined here .