# Add administrators

Source: https://docs.settlemint.com/docs/operators/user-guides/platform-setup/add-admins
Grant platform administrator roles to an existing participant or wallet from Platform Settings.



Add a platform administrator when a person or operator wallet needs access to platform-wide DALP administration. Choose the recipient, grant only the roles required for their responsibility, confirm the role grants, and verify the administrator appears in Platform Settings.

Platform administrator roles are different from user invitations and token-level asset roles.

## Prerequisites [#prerequisites]

Before you start, make sure you have:

* A signed-in account with the **Permission manager** platform role. DALP stores this role as `admin`.
* Access to the wallet verification method required by your platform, such as PIN, OTP, or another configured verification step.
* The recipient already identified as an organization participant or wallet address.
* A clear decision on which platform roles the recipient needs.

<Callout type="warning" title="Grant the narrowest role set that works">
  Platform administrator roles control system-wide operations. Grant **Permission manager** only to operators who should
  be able to grant and revoke platform roles for other wallets.
</Callout>

## Choose the right platform roles [#choose-the-right-platform-roles]

Platform administrator roles control system-wide operations. Asset-specific roles, such as Asset Operator, Custodian, Supply Management, and Emergency, are assigned on individual tokens during asset creation or asset administration.

| Role                        | Role key             | Use it for                                             |
| --------------------------- | -------------------- | ------------------------------------------------------ |
| Permission manager          | `admin`              | Root platform administration and role management.      |
| Auditor                     | `auditor`            | Platform audit and review access.                      |
| System manager              | `systemManager`      | Core platform configuration and upgrade operations.    |
| Asset manager               | `tokenManager`       | Asset deployment and token-factory operations.         |
| Compliance manager          | `complianceManager`  | Platform compliance-module setup and enforcement.      |
| Verification policy manager | `claimPolicyManager` | Trusted issuer and claim-topic policy management.      |
| Verification issuer         | `claimIssuer`        | Claim issuance on registered identities.               |
| Identity manager            | `identityManager`    | Identity registry maintenance and recovery operations. |
| Feeds manager               | `feedsManager`       | Platform data-feed management.                         |
| Gas manager                 | `gasManager`         | Gas and transaction-funding operations.                |

For the wider authorization model, including read-only auditor access and asset-level roles, see [Authorization](/docs/compliance-security/security/authorization).

## Add a platform administrator [#add-a-platform-administrator]

<Steps>
  <Step>
    ### Open platform admins [#open-platform-admins]

    Go to **Platform Settings** > **Platform Admins**. The page lists current platform administrators and their assigned roles.

    ![Platform Admins table](/docs/platform-setup/platform-admins-table.webp)
  </Step>

  <Step>
    ### Start the add-admin flow [#start-the-add-admin-flow]

    Click **Add admin**. DALP opens the administrator creation flow.
  </Step>

  <Step>
    ### Choose the recipient [#choose-the-recipient]

    Select the person or wallet that should receive platform administrator roles. Use the recipient selector for organization participants, or enter the wallet address when you are granting roles directly to a wallet.

    ![Recipient selector interface](/docs/platform-setup/recipient-selector.webp)
  </Step>

  <Step>
    ### Select the roles to grant [#select-the-roles-to-grant]

    Choose the platform roles that match the recipient's operating responsibility. Start from the role table above, then grant the smallest set that lets the recipient complete their work.

    ![Role selection interface](/docs/platform-setup/role-selection.webp)
  </Step>

  <Step>
    ### Review and save the grants [#review-and-save-the-grants]

    Click **Continue** and review the summary. When the role set is correct, click **Save** and complete the wallet verification prompt. DALP submits the platform role grants after your verification succeeds.
  </Step>

  <Step>
    ### Verify the administrator [#verify-the-administrator]

    After the transaction confirms, return to the **Platform Admins** table and check that the recipient appears with the expected roles. If the new administrator is already signed in, ask them to refresh or sign in again before using the newly granted admin surfaces.
  </Step>
</Steps>

## After adding the administrator [#after-adding-the-administrator]

* Record why each role was granted so the assignment can be reviewed later.
* Keep duties separated where possible. For example, audit visibility and role management do not need to live on the same wallet.
* Review platform administrators periodically and remove roles that are no longer needed.
* Use [Change admin roles](/docs/operators/user-guides/platform-setup/change-admin-roles) when a recipient needs a different role set later.

## Troubleshooting [#troubleshooting]

| Issue                                        | What to check                                                                                                                                 |
| -------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
| **You cannot see Add admin**                 | Confirm your account has the **Permission manager** role, then return to **Platform Settings** > **Platform Admins**.                         |
| **A role cannot be selected**                | Confirm the connected administrator wallet is allowed to grant that role. The role manager may need to add the missing grant authority first. |
| **Save or verification fails**               | Check that your wallet verification code is current, your session is active, and the connected wallet still holds **Permission manager**.     |
| **The recipient cannot see admin functions** | Confirm the transaction completed, then ask the recipient to refresh the application or sign in again.                                        |

## Related guides [#related-guides]

* [Platform setup overview](/docs/operators/user-guides/platform-setup/platform-overview) - Plan platform roles before granting them.
* [Change admin roles](/docs/operators/user-guides/platform-setup/change-admin-roles) - Modify or revoke roles for an existing administrator.
* [Invite users](/docs/operators/user-guides/user-management/invite-users) - Add team members before assigning platform responsibilities.
* [First admin setup](/docs/operators/user-guides/platform-setup/first-admin-setup) - Complete initial platform administration setup.
