---
title: "MUA (Multi-User Authorization)"
slug: "adding-security-contacts"
description: "With multiuser authentication (MUA), security contacts are responsible for ensuring the security of an organization's information systems and data. A Root user can add up to three security contacts who will be required to sign off on account activities that the Root user specifies. There is no limit to the number of activities that these contacts can oversee."
tags: ["Account Settings", "Security contact", "Security Settings", "Settings"]
updated: 2026-02-25T23:44:38Z
published: 2026-02-25T23:44:38Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wasabi.com/llms.txt
> Use this file to discover all available pages before exploring further.

# MUA (Multi-User Authorization)

## Setting Up MUA

With this feature, security contacts are responsible for ensuring the security of an organization's information systems and data. For example, if there is an attempt to delete a Root account and a security contact denies the deletion, the Root account user will receive an alert.

As a Root user, you can add up to three security contacts who will be required to sign off on account activities that you specify. There is no limit to the number of activities that these contacts can oversee.

[Multi-Factor Authentication (MFA)](https://docs.wasabi.com/docs/creating-a-virtual-multi-factor-authentication-mfa-device) must be enabled before you can add a security contact.

> The Security Contacts feature is available for a Root user only.

## Adding a Security Contact

1. Click **Security**on the Wasabi menu. Select **MUA**.![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-UA831HNM.png)
2. Click **Add Security Contact**.

If MFA is not enabled, a message will remind you to do so. Refer to [Multi-Factor Authentication (MFA) Device](https://docs.wasabi.com/docs/creating-a-virtual-multi-factor-authentication-mfa-device).
3. Enter the email of the security contact. Note that the domain must match your Root account domain.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-LGZU480N.png)
4. Click in the **Activities**area to open the drop-down.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-R3GXIFOX.png)
5. Select the activity(ies) for this contact:

For more details about what happens when a user requests an account or bucket deletion, refer to [MUA Security Activities](https://docs.wasabi.com/docs/mua-security-activities).
  - Delete Covert Copy Bucket—The security contact will be required to approve a request to delete a bucket that has the Covert Copy feature enabled.
  - Access Covert Copy Bucket—The security contact will be required to approve a request to access a bucket that has the Covert Copy feature enabled.
  - Delete Account—The security contact will be required to approve a request to delete the account.
  - Delete Bucket—The security contact will be required to approve a request to delete the bucket.
6. In this example, two activities are selected (Delete Bucket and Delete Account). After selecting the activity(ies), click **Continue**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-5ZD8DPD9.png)
7. Enter an authorization code from your MFA device.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-8O27K03O.png)
8. Click **Send**. The contact is displayed with the activity you defined. For example:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-DWD7CEVV.png)

You can click ![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-2RL4ZUFL.png) to the left of the contact email to see the activities that are assigned to the contact. For example:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-QXPZ4B17.png)

After you click **Send**, Wasabi Support will email an invitation to the contact, and the person can accept or decline your request. An example of this email is:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-8CX8TTH6.png)

> The invitation email sent to a contact is valid for 24 hours.

After the recipient clicks **Continue**, an invitation is displayed:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-CCUYN5V9.png)

The recipient needs to click **Accept Invite**to become a security contact. After doing so, this message is displayed for the security contact:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-BG73WJXP.png)
9. You can repeat this procedure, starting with Step 2, if you want to add up to three security contacts.

## Resending an Invitation

You may want to resend the invitation to a potential security contact if the person has not responded.

1. Click ![actions-ellipsis](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/actions-ellipsis.png) to open the **Action**menu to the right of the contact information.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-OEFOCPMI.png)
2. Select **Resend**.
3. When asked to confirm, click**Resend**.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-DOHRDW4R.png)

## Canceling an Invitation

You can cancel an invitation before the potential security contact responds (accepts or declines).

1. Click ![actions-ellipsis](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/actions-ellipsis.png) to open the **Action**menu to the right of the contact information.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-OEFOCPMI.png)
2. Select **Cancel.**
3. When asked to confirm, enter an authorization code from your MFA device.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-DFEOG5QT.png)
4. Click**Cancel Invitation**.

## Changing the Activities for a Security Contact

You can remove a person as a security contact after the person has accepted the invitation.

1. Click ![actions-ellipsis](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/actions-ellipsis.png) to open the **Action**menu to the right of the contact information.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-OEFOCPMI.png)
2. Select **Edit Activities**. The Edit Security Contact Activities screen is displayed. For example:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-02NGGEIO.png)
3. Click in the Activities area to add or remove an activity. At least one activity is required.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-7ELWX2LA.png)
4. Click**Continue**.

## Removing a Security Contact

You can remove a person as a security contact after the person has accepted the invitation.

1. Click ![actions-ellipsis](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/actions-ellipsis.png) to open the **Action**menu to the right of the contact information.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-OEFOCPMI.png)
2. Select **Remove.**
3. When asked to confirm, enter an authorization code from your MFA device.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-1719083279364.png)
4. Click**Remove**.

Removal is subject to approval from the security contact, who will receive an email requesting confirmation of the removal. The security contact is required to accept the request before removal takes place.

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-Z67VWNOV.png)

After the recipient clicks **Continue**, an confirmation request is displayed:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-QD2SYFJR.png)

The recipient needs to click **Accept Contact Removal**to confirm. Then, the recipient will receive this message:

![](https://cdn.document360.io/bef0a1ea-7768-4d5a-b520-c4fe2f7fafad/Images/Documentation/image-RTPK3NP1.png)

## Related

- [MFA (Multi-Factor Authentication)](/creating-a-virtual-multi-factor-authentication-mfa-device.md)
- [Security Center](/defining-security-settings.md)
- [Advanced Security Options](/setting-advanced-security-options.md)