People, roles and keys
Who receives and reads (Recipient, holds a key) and who follows the workflow without decrypting (Manager, invited by email).
Step 4 of the channel onboarding (“People, roles and keys”) shows a single list of the channel’s people. When you add a person, the first question is: what will they do?
- Recipient — receives and reads reports: holds one of the channel’s three keys (content, identity, metadata). The RSA-4096 key pair is generated in their browser; only the public key reaches the server.
- Manager — follows the workflow, deadlines and the dialogue with the reporter without decrypting anything: receives an invitation link by email (in the inviter’s language) and signs in with their own account.
Adding a Recipient
- Choose role and key: the drop-down explains who will read what (content = can have several holders; identity and metadata usually one or few).
- The browser generates the keys and shows the 24 recovery words: the person saves them and downloads the encrypted private key file.
- Tick “I have saved the 24 words”: until then the “Add person” button stays disabled.
- Only the public key is sent to the server.
Adding a Manager
Enter name, email and role (Channel manager or Creation delegate) and press “Send the invitation”: the email goes out automatically and the person appears in the list as “Invitation pending”. If the email cannot be sent, the console shows the link to hand over manually. “Resend the invitation” generates a new link and the previous one stops working.
Deactivate and reactivate
Every key holder can be deactivated and reactivated from the list. The last active holder of a key cannot be deactivated: the channel would be left with nobody able to read that compartment.