Provision the First User

What to do

In the dashboard:

1. open Provisioned users
2. create the first user account
3. confirm the returned pairing QR or account record
4. keep the created external account ID available for the first trigger

How to model it

A provisioned user should map to one concrete executing entity in your system. A user can be an agent runtime, backend service, or tenant runtime account.

Examples:

• one production agent runtime (thenks-month-end-agent-prod)
• one staging runtime (thenks-month-end-agent-staging)
• one tenant-specific runtime (merchant-abc-runtime)

Each provisioned user should receive a scoped API key with least privilege, rather than using a broad organization admin key at runtime.