**Users** in your admin sidebar lists your traders. Your own staff are not on
it: they are managed under **Team**, with the role that decides what they may
do.

You need the `view_traders` permission to open the screen and
`manage_traders` to change a trader, write notes or sign them out. Some tabs
need a permission of their own, listed below, and stay hidden without it.

## The list

The screen opens on the list alone, across its whole width, and shows nobody
in full until you pick them. That is on purpose: the first trader's details on
screen for whoever walks past is a privacy problem.

Each row is a trader with their email address, how many accounts they have
and where those stand, whether their identity is verified, what they spent in
your firm's currency, when they joined and when they were last active. Columns
drop off from the right as the screen narrows, and the trader always stays.

The list holds fifty traders to a page. The search box finds a trader by name,
email address, handle, phone number, the start of an account number, their
`usr_` id, or an IP address they were ever seen on, which lists everybody who
used that address.

The filter menu narrows the list to traders who can or cannot sign in, who
have a funded account, one in evaluation or none, who have or have not
verified their identity, who are online now, and, with `view_fraud`, who have
an open fraud flag or a restriction. The same menu sorts by newest, last
active, name, how much they spent, the most accounts, or verified first, and
so does clicking the head of a column.

J and K move through the list and Enter opens the trader they rest on. A right click
on a row offers what can be done without opening the trader: give a challenge,
activate or deactivate, copy the email address, id or link, and delete.

## A trader

Picking a trader folds the list to a column on the left and slides the trader
in beside it. From there J and K show each trader they rest on. The cross in
the corner or Escape folds the trader away and gives the list its width back,
with the same filters and page.

Every trader has their own address, `/admin/users/usr_...`, and the tab you
have open is part of it. A link to a trader from a payout, a flag or a ticket
opens on them with the list beside them.

The head of a trader says whether they can sign in, whether fraud detection
restricts them, whether their payouts are held, how many open flags they are
in and when they were last online. With `view_fraud` the tags your team gave
them in the Review queue stand under it, and a click on one opens the queue on
everybody with that tag. Under the head are the notes somebody pinned, then
the number of accounts, the state of their identity check, when they joined
and whether they use two-factor.

| Tab      | What it holds | Needs |
| -------- | ------------- | ----- |
| Overview | What they spent and were paid, the team notes, their profile, who they said they are with every identity check, how they sign in, and what the AI assistant remembers about them | |
| Accounts | Every account, funded first, saying how it came to be: bought, with which coupon and for how much, given by the firm, or the next phase of an earlier one. Below them, what the trading rules caught them doing | `view_trading_rules` for the rules |
| Money    | Every checkout including the ones that failed, every challenge the firm gave them, every payout, and what they earned as an affiliate | `view_payouts` for payouts, `view_affiliates` for affiliate earnings |
| Systems  | Their machines, the IP addresses they came from, and where they are signed in right now | `view_fraud` |
| Fraud    | What is held back from them now, whether their payouts are held, every flag they are in, and the detectors they are held to differently | `view_fraud` |
| Support  | Their tickets, the ones still waiting first, and the mail conversations with their address in the mailboxes you may read | `view_tickets` for tickets, `view_mailbox` for mail |
| Activity | What they did and what was done to them, without page views, with a link to the full log | `view_activity_logs` |

Money is added up in the currency your firm sells in. What a trader paid in
another currency is listed beside it per currency, never converted. "Kept" is
what the firm has left after refunds and payouts, and reads negative for a
trader who was paid more than they spent.

## Machines

A browser reports a fingerprint per browser and per screen, so the same laptop
used in Chrome and Safari shows up twice in the raw data. Systems folds those
into one machine by what stays the same: the system, the graphics, the number
of processor threads and the memory.

Each machine says what it is as far as the browser lets us see. Graphics are
named as the browser reports them, such as an NVIDIA GeForce RTX 5080 or an
Apple M4 Pro. On a Mac the graphics are the chip itself, so the chip is the
processor too. A MacBook's model and size are read from its built-in screen and
marked as such: on an external monitor it reads as a Mac. An iPhone is named by
its screen size, since several generations share one. Under each machine are
the browsers and screens it was used with, its last IP address, and the other
traders of your firm who were seen on the same machine.

Some things a browser does not tell, and the screen says so instead of
guessing. Safari names no graphics at all, Firefox rounds to a family, and
browsers stop counting memory at 8 GB. Windows 10 and 11 report the same
version unless the browser is Chromium, which tells them apart.

Each IP address shows where it is, the network it belongs to, whether it is a
VPN, a data centre, Tor or a residential proxy, how often the trader signed in
from it, and who else used it. A right click lists everybody on that address.

Where they are signed in now lists every browser and app with its address and
how they signed in. **Sign out** ends one device, **Sign out everywhere** ends
them all. Both are recorded in the activity log as done by your team, and the
trader can sign in again straight away with their password.

## Notes

Notes are for your team and never reach the trader. Anybody who may manage
traders writes them and pins the ones a colleague must not miss. Only the
author edits a note, and anybody who may manage traders can delete one. A
pinned note shows above every tab, so it is read whichever tab is open.

Nothing in the notes saves on its own. A new note, an edit, a pin and a
removal are changes like any field of the profile, counted and saved by the
bar at the bottom of the screen. A removed note stays in the list, struck
through, until then, so it can be taken back.

## Changing a trader

The profile on the Overview tab is edited where it is read: name, handle,
profile photo, email address, whether the address is confirmed, phone number,
whether they can sign in, and a new password. The bar at the bottom of the
screen counts the changes, the notes included, and saves them together. It
asks before you move to another trader or tab, or close the trader, with
changes unsaved. Switching off **Can sign in** signs them out of every browser
and app at once.

The handle is the name other traders see on leaderboards and in the
community. Your team can change it without the 30 day wait a trader has, and
the old one is free again straight away. **Remove** clears it, and the trader
is asked to pick a new one the next time they open the platform, with a line
saying the team removed the old one. A photo can be uploaded, replaced or
removed.

The trader always gets an email when your team resets their two-factor, sets
their password or changes their email address, which then goes to the old
address. For a new handle, a removed handle, a new photo and the identity
check, **Tell the trader by email** decides, and it is on until you switch it
off. You can reword each of these mails under **Email**, but not switch them
off.

The menu in the head of a trader holds what acts at once rather than waiting
for the bar: sign out everywhere, add to the team with a role, open them as an
affiliate, and delete. **Give a challenge** starts a free account straight
away. **Add to the team** needs `manage_team`, since a role hands out its
permissions.

**New trader** opens the same form in the inspector, for somebody who cannot
sign up themselves. They get no email, so send them their password yourself.

## Signing in and identity

The Sign-in block on the Overview tab offers **Mail a password reset link**,
which sends the same link as "forgot password" to the trader's own address
and never shows it to you. **Reset two-factor** removes their authenticator,
recovery codes and passkeys and signs them out everywhere, for a trader who
lost their phone. Whoever talks support into this must not stay signed in on
the device they said they lost. An address that is not confirmed yet gets
**Send the verification mail again**. Each of these asks first, because it
reaches the trader.

Where your firm asks traders to verify their identity, the Identity block has
two actions. **Approve identity by hand** asks for a reason and then counts as
a passed check everywhere, for a trader your team verified another way. The
attempt reads "Approved by hand", by whom, when and why. Nothing is uploaded,
so no identity documents are kept here. **Ask to verify again** withdraws
every passed check: whatever needs one, such as buying a challenge or a
payout, stays closed until they pass again. The email that tells them holds a
link to start.

Somebody on your team can be opened here from a link, but their email
address, password, two-factor and access are only changed by somebody with
`manage_team`. The owner's are changed by the owner alone. Without that, a
support agent could give the owner's account their own address and mail
themselves a reset link.

## Contacting a trader

**Contact** in the head of a trader writes to them without looking them up
again. **Open a ticket** opens a new ticket with the trader already chosen, and
reads **Go to the open ticket** when they have one, since a trader has one at
a time. **Write a mail** opens the mail client with the trader as recipient
and your firm's default mailbox as sender, or another one when you may not
read the default. Each needs what its own screen needs: `manage_tickets` for a
ticket, a mailbox you may read for a mail.

## Viewing as a trader

**View as this trader** opens the trader app as the trader sees it: their
accounts, their dashboard, their settings. You stay signed in as yourself, so
the admin panel keeps working in another tab, and a bar across the top says
whose app you are looking at and until when.

Nothing can be changed. Every save, order and purchase is refused with a line
in the bar, and so is anything that would hand you a secret, such as their
two-factor key. The trader never knows: no session, device, IP address,
page view or "last seen" is recorded on them. Your activity log records who
looked, at whom and for how long.

A look ends after 60 minutes or with **Stop viewing**, and takes you back to
the trader on Users. Live prices from dxFeed do not stream while viewing, a
popup cannot be dismissed, and the terminal does not save its layout. It needs
`manage_traders`, and is not offered on somebody on your team.

## Fraud

With `manage_fraud` the menu in the head of a trader and the Fraud tab act on
fraud detection directly.

**Restrict or flag by hand** raises a flag your detectors would not have
raised, with a reason. At the level Flag it only puts the trader in the
Review queue. Restrict also takes away what your firm set Restrict to take,
and Block suspends the trader. A message for the trader and an end date are
optional.

**Hold payouts** keeps every payout from leaving without restricting anything
else: a payout or affiliate payout request is refused, and one already waiting
can be neither approved nor marked paid. It takes a reason, an optional end
date and an optional message the trader reads when they try. Holding again
changes the hold there is, and **Release payouts** ends it.

On the Fraud tab a restriction can be lifted on its own, and **New override**
holds the trader to a detector differently from everybody else. **Open in
Review** opens their case in the Review queue, where a flag is decided.

## In the older designs

Propper - OG and Tactical keep a table of every user, staff included, with a
page per trader and separate pages to create and edit one. The notes, the
Systems tab, signing a trader out, the handle and photo, the sign-in and
identity actions, contact, viewing as a trader and the fraud actions are only
in the standard design.