Client & User Management

🧭 Basics & Terminology

The Client & User Management module forms the foundation of the Koala.Markets platform. It manages clients, users, and their associated access rights within a clearly structured multi-tenant architecture. The platform distinguishes three levels: Tenant, Business Client, and Retail Client.

🏢 What is a Tenant?

A Tenant in Koala.Markets refers to an independent organizational unit — typically the platform operator. The Tenant manages:

• all associated Business and Retail Clients
• all assigned Users (staff)
• roles and permissions within its scope
• its own configurations, security policies, and reporting logic

A Tenant is completely isolated from other Tenants and is the only entity allowed to create new Business Clients.

ℹ️ Note: Platform operators are typically licensed institutions, liability umbrellas, or regulated cooperation partners. Regulatory qualification is handled outside the system.

🧑‍💼 What is a Business Client?

A Business Client is a legal entity or organization managed under a Tenant — such as:

• institutional investors
• distribution partners
• asset managers, VGVs
• family offices, foundations, companies

A Business Client can:

• create and manage its own Retail Clients
• manage its own Users (e.g. admin, support, compliance)

Important:

• A Business Client cannot create other Business Clients
• Tenant actions (e.g. managing users) require coordination with the Business Client where applicable

🙋 What is a Retail Client?

A Retail Client is a natural person — a private investor with a personal account on the platform. They can be:

• managed directly by the Tenant
• or assigned to a Business Client

Retail Clients usually have:

• one personal user account
• access to their individual trading environment

👤 What are Users?

Users are employees or authorized persons with access to the platform — e.g. for administration, support, accounting, or compliance.

Typical user roles:

• Tenant-side: Admins, support, compliance, accounting
• Business-side: Relationship managers, assistants, client service

Important:

• Every user is assigned to either a Tenant or a Business Client
• Access is strictly scoped to their respective organizational unit
• User administration takes place in the Users menu

🔑 Permissions Overview

Role	Can create Business Clients	Can create Retail Clients	Can manage Users
Tenant	✅ Yes	✅ Yes	✅ Yes (all users)
Business Client	❌ No	❌ No	✅ Yes (own users)
Retail Client	❌ No	❌ No	❌ No

🔐 Koala Identity Server – User Management & Access Security

All authentication and access control is managed via the Koala Identity Server:

• Authentication via OpenID Connect and OAuth 2.0
• Optional Two-Factor Authentication (2FA) via email or SMS
• Role-based access control using RBAC

This architecture ensures:

• precise role-based permissions
• strict isolation between Tenants
• scalability and regulatory compliance

🔗 Related Menu Items

The Client & User Management module includes the following sub-functions:

• Create New Client – Create Retail or Business Clients
• Client Overview – Overview, Search and filter all registered clients
• Update Client – Edit existing client profiles
• Delete Client – Remove, Disable a client from the system
• Client Approval – Approval process for new clients
• KYC Cases – Manage and review KYC cases
• Users – Manage users, assign roles, and control access rights
• Tenants – Manage logical partitions (tenants) within the system for multi-client operations