Lockbox: Security Administration Instructions

Transcription

1 Lockbox: Security Administration Instructions SECTION ONE: Administrative Privileges...2 SECTION TWO: New Users...3 Registration Codes...3 Confirmation Authorization...4 SECTION THREE: Assigning User ID Privileges...5 SECTION FOUR: Maintaining User IDs...6 SECTION FIVE: User ID Release...7 SECTION SIX: User ID Reporting...8 SECTION SEVEN: Group ID Setup...10

2 LOCKBOX: SECURITY ADMINISTRATION INSTRUCTIONS USER GUIDE 2 SECTION ONE Overview Administrative Privileges A Security Administrator is an individual user that has additional functionality regarding the security of a Company s users. Each Company ID is required to have a minimum of two security administrators assigned. Security Administrators have significant benefits above that of your users: Able to unlock users and change their password, which reduces the number of customer service calls to the bank. Helps to maintain consistent processes across all users. Able to distribute registration codes to new users and require no bank interaction. Able to assign User ID privileges and perform User ID maintenance. Can view audit reports to determine which users are performing which activities and be better able to manage audits and risk assessments. Will know who is using their Company ID. Optional ability to authorize anyone who self-registers before the user can gain access to the system (must request this option upon setup, otherwise, you will receive a notification when a user self-registers, but will not be required to release the ID before they can log in).

3 LOCKBOX: SECURITY ADMINISTRATION INSTRUCTIONS USER GUIDE 3 SECTION TWO New Users: Registration Codes, Confirmation, & Authorization All new users must complete a self-registration process to obtain access to the system. This process requires the user to enter an eight-digit registration code when completing the information. Registration Codes Security Administrators are responsible for distribution of the registration code to their new users. Security Administrators can access the Registration Code through the Edit User ID Screen located under the Administration > Entitlements > User ID Setup submenu. The Registration Code is displayed on the top left of the screen, allowing Security Administrators to easily find the current code. *Please Note: Each time a User ID is deleted from the system, the Registration Code will automatically change in order to maintain system integrity and to prevent the deleted user from registering a new ID in the system and gaining access again using the previous Registration Code. Therefore, it is best to always obtain the Registration Code from this screen when providing it to a user to ensure you have the most current code. Confirmation When a new user completes the self-registration process, a confirmation will automatically be sent to all Security Administrators on the Company ID.

4 LOCKBOX: SECURITY ADMINISTRATION INSTRUCTIONS USER GUIDE 4 Authorization If a company decides to enable the Admin Review feature, a Security Administrator will be required to approve all users that complete the self-registration process before the user can gain access to the system. The default for this feature is Off. When a new user completes self-registration, the user will be directed to contact their Security Administrator(s) to approve their registration within five days. If the user s ID is not released within 5 days, the ID will be removed from the system and the user will be required to register again. The Security Administrator can approve the ID by selecting ID Release from the Administration > Entitlements submenu. To view the User ID s details, select the ID (shown as an underlined link). To release the ID, select the word Release in the Action column for that user.

5 LOCKBOX: SECURITY ADMINISTRATION INSTRUCTIONS USER GUIDE 5 SECTION THREE Assigning User ID Privileges Security Administrators are responsible for assigning User ID privileges. To do this, select Administration > Entitlements > User ID Setup > Edit User ID from the menu. Select the User ID that you want to modify. Note: Only Active or Expired users can be selected. Once you select a user, the Service List will be displayed with all services that can be entitled to the user. Find the service you want to entitle and select the Add button in the Action column for that ID. All Security Administrator actions are dual-release and require that a second Security Administrator approve the action before it will take effect in the system. See User ID Release selection for more information on how to release an ID.

6 LOCKBOX: SECURITY ADMINISTRATION INSTRUCTIONS USER GUIDE 6 SECTION FOUR Maintaining User IDs Security Administrators are responsible for performing necessary User ID maintenance. To perform maintenance on a User ID, select Administration > Entitlements > User ID Setup > Edit User ID from the menu. Then select the user you want to modify. The following screen will display. User ID Maintenance includes the following functions: Edit Profile, Restore, Freeze/Reactivate, Change Password, Delete, and Copy To. Edit Profile: To modify User information (name, address, phone number, address, date format, expiration days, and Entitlement group) Restore: To restore a locked ID resulting from unsuccessful login attempts Freeze/Reactivate: To freeze an ID that you no longer want to be able to access the system, or to reactivate an ID that was previously frozen by an Administrator (Note: This is the only administrative function that is single-release where it only takes one Administrator to complete the action) Change Password: To change the existing password of a user (typically used when a user forgets their password or if you feel the user s password was compromised) Delete: To delete the ID from the system completely Copy To: To copy all existing user entitlements from this ID to another user ID that just registered on the system and has no existing entitlements in place yet (enter the User ID in the field next to the Copy To button in order to use this feature)

7 LOCKBOX: SECURITY ADMINISTRATION INSTRUCTIONS USER GUIDE 7 SECTION FIVE User ID Release A second Security Administrator is required to approve all User ID maintenance requests (except for the freeze/reactivate function). To approve a request, select ID Release located under the Administration > Entitlements menu. The following screen will display. A list of all IDs available to be released will appear. To view the User ID s details, select the ID (shown as an underlined link). To release the ID, select the word Release in the Action column for that user.

8 LOCKBOX: SECURITY ADMINISTRATION INSTRUCTIONS USER GUIDE 8 SECTION SIX User ID Reporting User ID Report ID Reports allow the Administrator to pull reports of users and groups within the company, and their current entitlement setups. The reports show current entitlement information for IDs, as it exists in the system, at the time of the report request. The reports do not show any updates to IDs in a pending authorization status. Admins can request a summary or detail report of entitlements for IDs within the company. All User IDs, all Group IDs, or a combined report may be requested. To request an ID Report, select Administration > Entitlements > ID Report from the menu. The Customer ID and Customer Name fields are pre-filled. Select whether you want Summary or Detail Report Data. Select a Report Type (User, Group, or All). Select an Output Format: Advanced provides a dynamic report with the ability to expand/collapse areas of the report). PDF provides a fully expanded version of the report in PDF format that you can save to your PC. Click Generate Now to produce the report.

9 LOCKBOX: SECURITY ADMINISTRATION INSTRUCTIONS USER GUIDE 9 Audit Activity Report The Audit Activity Report provides the Security Administrators with the ability to view individual or All Users activity. This report can be requested for All Applications, or selected applications. The Start and End dates must be within 90 calendar days from the current date, and the Date Range cannot be greater than 14 calendar days at a time. To request an Audit Activity Report, select Administration > Entitlements > Audit Report from the menu. Select a Report Type (User - All Users or Individual User - OR Application - All Applications or an Individual Application/service). Enter a Date Range (you can view up to 90 days of history on this report but can only view 14 calendar days worth of data at one time). If you only want to view one specific day, leave the End date field blank. Select the Report Format you want to view, either HTML or PDF. HTML Provides a fully expanded version of the report. This version also has a toolbar button to view the report as PDF, enabling the user to view the report in PDF format directly from the HTML output screen. PDF Provides a fully expanded version of the report. The PDF version, as displayed in Adobe, also includes bookmarks allowing rapid scrolling to the bookmarked content. This version can be saved and archived locally. Once selections are made, click Generate Now. Password Violation Report Allows the Administrator to view all invalid login attempts for one or all users. This report holds the same amount of history and uses the same selection options as the Audit Report above. To request a Password Violation Report, select Administration > Entitlements > Pwrd Violation Rpt from the menu.

10 LOCKBOX: SECURITY ADMINISTRATION INSTRUCTIONS USER GUIDE 10 SECTION SEVEN Group ID Setup Create a Group ID Security Administrators can create a Group ID, assign users to the group, then modify the Group so that all users have the exact same entitlements at all times. To create a Group ID, select Administration > Entitlements > Group ID Setup > Create Group ID from the menu. Enter the Group Name and the Group Description (for instance Customer Service Team). Click Add Profile to add the new group profile to the system. This feature is single release and does not require that another Administrator release this request. Edit a Group ID Once a Group ID has been created, you can modify the group to add service entitlements to it. Select Administration > Entitlements > Group ID Setup > Edit Group ID from the menu. All edit functions are identical to the edit User ID functions above. Select the Group to be modified, then make your changes just as you would a User ID. A second Administrator will then need to go into ID Release to approve the changes. Assign a User to a Group To assign a user to a Group, select Administration > Entitlements > User ID Setup > Edit User ID from the menu. Select the User ID from the list that you want to add to the group and then select Edit Profile. At the bottom of the profile page, select the appropriate Group ID from the dropdown box and click Save. The User ID will then need to be released by a second Security Administrator.