When a new Console user or new API user is added to a workspace, the workspace's Owner and the Admin Quorum receive an approval notification on their mobile devices. For the new user to continue their onboarding process, they must approve the user within seven days.
Note that if the role has signing privileges, the Owner must also approve the derivation of a key share for the new user's MPC device.