System Administration: User Management · 4. On the Access Control page, select the Administrative...

User Guide

User Authorisation Summary

September 2017


Published: September 2017 i

Disclaimer

This document is issued by HSBC Bank plc (‘HSBC’). HSBC Bank Plc is authorised by the Prudential

Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation

Authority (Registration Number 114216). This document is for information purposes only and does not

constitute or form any part of (i) any invitation or inducement to engage in investment activity, or (ii) any

offer, solicitation or invitation by HSBC or any of the HSBC Group for the sale or purchase of any products,

services and/or any investments.

HSBC provides this document to the recipient on an ‘as is’ basis and except as provided herein, does not

warrant that the contents of this document is accurate, sufficient or relevant for the recipient’s purposes.

HSBC may have obtained information in this document from sources including from third party suppliers,

it believes to be reliable but which have not been independently verified. In relation to information on

products and/or services supplied by a third party supplier, the recipient should obtain further information

on these products and/or services directly from the supplier.

Please note that this document may contain hypertext links to websites operated by other members of the

HSBC group and third parties respectively. In relation to hypertext links to websites operated by members

of the HSBC group, please read the terms and conditions of the linked website. In relation to hypertext

links to websites operated by third parties, please note that: (1) the recipient should read the terms and

conditions of the website; and (2) HSBC does not have any control whatsoever over these websites and

shall not be liable for the recipient’s use of them.

HSBC will use its reasonable endeavours to ensure that the contents of this document are current at the

date of its first publication. HSBC gives no undertaking and is under no obligation to provide the recipient

with access to any additional information or to update all or any part of the contents of this document or

to correct any inaccuracies in it which may become apparent.

HSBC is not responsible for providing the recipient with any legal, tax or other advice regarding the

contents of this document and the recipient should make its own arrangements in respect of this

accordingly. This document has not been prepared to address the specific requirements or objectives of

any particular client. The recipient is solely responsible for making its own independent appraisal of an

investigation into the products, services and other content referred to in this document.

This document should be kept confidential and shall be used for internal business purposes only by the

recipient to whom it is provided and its officers, employees and agents. This document should be read in

its entirety and shall not be photocopied, reproduced, distributed or disclosed in whole or in part to any

other person without the prior written consent of the relevant HSBC Group member. This document is

proprietary to HSBC and the recipient agrees on request to return or, if requested, to destroy this

document and all other materials received relating to the information contained herein.

Except in the case of fraudulent misrepresentation and/or breach of these terms, no liability is accepted

whatsoever by HSBC and the HSBC Group for any direct, indirect or consequential loss arising from the

use of this document.

Please contact your local HSBC representative for further information on the availability of products and/or

services discussed herein in your region.

© Copyright. HSBC Bank plc 2017 ALL RIGHTS RESERVED.


Published: September 2017 ii

Contents Disclaimer ........................................................................................................................... i

About User Authorisation Summary ............................................................................... 1

Before you begin ...................................................................................................................... 1

Managing HSBCnet Users ................................................................................................ 2

Setting up new Users .................................................................................................... 2

User Authorisation Summary—Setting up new Users .......................................................... 2

User Authorisation Summary page .............................................................................. 3 Editing displayed content ............................................................................................. 3 Step-by-step setup process ......................................................................................... 4

Managing Existing Users ............................................................................................ 10

User Authorisation Summary—Managing Existing Users .................................................. 10


Published: September 2017 1

About User Authorisation Summary

The User Authorisation Summary service allows System Administrators to act on pending transactions

relating to User management.

Before you begin

Your System Administrator must entitle your access so that you can use the User Authorisation

Summary which lists current information about registered Users that are pending set up and approval by

System Administrator(s)



Managing HSBCnet Users

This section deals with User setup using the User Authorisation Summary (UAS) service which involves

two groups of activities to be performed by System Administrators:

Setting up new Users

Managing existing Users

Setting up new Users

As a System Administrator, new User setup activities performed by you vary with the Bank unit that the

User primarily deals with. Newly registered Users can be classified into:

USER TYPE REGISTRATION TYPE

Initial System Administrator

Registrations without Customer ID

Global Transaction Banking User

Securities Service User

Trade Services User

HSBC Investments User

Registrations with Customer ID

This guide is only for System Administrators performing setup tasks for Users registered with a reference

ID/New User Invitation e-mail. Accordingly, System Administrators can set up two types of Users:

Other System Administrators

End Users

User Authorisation Summary—Setting up new Users

The User Authorisation Summary service allows System Administrators to act on pending transactions

relating to User management.

In setting up new Users, use User Authorisation Summary to review, approve or reject new User

registrations.

For customers under Sole Administrative Control, the changes are processed immediately after the

System Administrator completes the setup and entitlement process.

For customers under Dual Administrative Control, a second System Administrator must approve

changes to User registration status, entitlements, and authorisation levels.

For customers under Dual Administrative Control with Preparer role, two System Administrators must

approve the changes initiated by a User with Preparer only entitlements.

Note: For more information about Sole and Dual Administrative Controls, refer to the System

Administration: User Management User Guide.

http://www.hsbcnet.com/learningcentre/attachments/user-guide/ug_sa_usermgmt.pdf

http://www.hsbcnet.com/learningcentre/attachments/user-guide/ug_sa_usermgmt.pdf




To view additional registrations, select Open more. The User Authorisation Summary page appears.

User Authorisation Summary page

The User Authorisation Summary page displays up to 500 transactions in up to 10 pages of 50

transactions each. Transactions are sorted by date, with the most recent transaction appearing first and

grouped by User. Because Users could have more than one active transaction, there may be less than

50 Users displayed on a page.

User Authorisation Summary page

Editing displayed content

Use the Edit link located on the title bar to filter the pending records based on location of business, action

status, date range and number of records. The function type and action status displayed in the User

Authorisation Summary depend on your entitlements and company profile.

Select the desired location of business, function type, action status and activity date. You can also select

the number of records to be displayed in the User Authorisation Summary.

Select Apply to filter the records.



User Authorisation Summary Edit link—Dual Administrative Control example

Note: Depending on your company’s unique setup, some of the options may appear different when you

access the Edit Content page.

Step-by-step setup process

Selecting on any pending action in the User Authorisation Summary launches the step-by-step setup

process. The steps in the process vary depending on the type of pending action that is being processed.

A typical User setup scenario for a Dual Administrative Control customer is described below.

1. From the User Authorisation Summary select a link in the Pending Action column to launch the

step-by-step setup process. The User Setup—User Profile page appears.

User Authorisation Summary service

2. Review the information on the page. Under Section 6 - Further Registration Information, select

System Administrator or End User in the User Type field. The User Type selection is irreversible.

3. Select Next Step to approve the profile and proceed to Access Control page. Alternatively, you can

select Reject to reject the setup.



Step-by-step process for User Setup—User Profile

4. On the Access Control page, select the Administrative User Entitlements link to set up the

administrative entitlements of the User (for System Administrators only). To set up entitlements to

transactional services select the specific service link. You can also copy the access rights of an

existing User by selecting the Copy button. For detailed information on setting up User entitlements

refer to the System Administration—User Entitlement user guide.

5. Select Next Step to accept the changes and proceed to the Access Control review page. Review

the information and select Next Step to proceed to the Security page. Alternatively, you can select

Modify to return to the main Access Control page to modify the access information.

http://www.hsbcnet.com/learningcentre/attachments/user-guide/ug_sa_entitle.pdf



Step-by-step process for User Setup—Access Control review

6. If your company has a Mixed Security profile, you can choose to allocate one of two authentication

types for the specific user.

- OTP token (also known as One Time Password or Security Device)



- Password only

Depending on your selection, one of the following two pages appear. Complete any mandatory

fields.

7. Select Next Step to proceed. Alternatively, you can skip this step by selecting the Skip button. You

can allocate a Security Device for the User at any time from the options available under the User

Management service.

Mixed Security Device Profile

Step-by-step process for User Setup—OTP Token/Security Device example

Step-by-step process for User Setup—Password Only example



Note: The User with Password only authentication rights may not be able to access transactional or

other services. This authentication type is given to Users who only require access to enquiry services

such as Balance and Transaction Reporting, Report and File Download, etc. The User does not require a

physical security device and the only need to authenticate themselves during the logon process with their

memorable answer and the three requested characters of their current password.

8. An acknowledgement page confirms your action. The updated pending action status appears.

Step-by-step process for User Setup—Acknowledgement

Depending on your company profile and User entitlement, the following pending function type/access status combinations for New User setup are available.

List of User Authorisation Summary pending actions: New User setup

CONTROL STATUS/ PENDING ACTION

DESCRIPTION ACTION REQUIRED

User setup

Sole Administrative Control

User Setup – Awaiting

New User has registered and the registration is awaiting entitlement and approval.

System Administrator must select this pending action, entitle the User and approve the setup.

Dual Administrative Control



System Administrator must select this pending action, entitle the User and approve the setup.

User Setup – Pending Approval

New User has registered, been entitled and approved by the first System Administrator and is awaiting final approval by second System Administrator.

Second System Administrator must select this pending action and approve the setup.

If the System Administrator exits the page without completing the approval, the pending action status will remain unchanged.

Dual (with preparer role) Administrative Control



Preparer must select this pending action, entitle the User and submit the setup for approval by first of two System Administrators.

Alternatively, first of two System Administrators can entitle and approve the setup.





User Setup – Pending Review

New User has registered; another User with Preparer role has entitled the User and is awaiting review and approval by the first of two System Administrators.

First of two System Administrators must select this pending action and approve the setup. If the System Administrator exits the page without completing the approval, the pending action status will remain unchanged.

User Setup – Pending Approval

New User has registered, been entitled by another User with Preparer role, has been reviewed and approved by the first System Administrator and is awaiting final approval by second System Administrator, OR

New User has registered, has been entitled and approved by first of two System Administrators and is awaiting approval by second administrator

Second of two System Administrators must select this pending action and approve the setup.

If the System Administrator exits the page without completing the approval, the pending action status will remain unchanged.

Common action for all types of Administrative Control

User Setup – Incomplete Approve

If during the approval process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’.

The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process.

User Setup – Incomplete Reject

If during the rejection process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Reject’.




User Setup – Pending Repair

New User has registered, been entitled and approved by the first System Administrator and is sent to repair at the setup stage by the final approving System Administrator. OR

New User has registered, another User with Preparer role has entitled the User and is sent to repair by first of two System Administrators at the first approval stage

New User has registered, another User with Preparer role, has entitled the User and is approved by first of two System Administrators but sent to repair by the second System Administrator at the final approval stage

The first System Administrator must select this pending action, repair the setup and resubmit it for final approval, OR

The User with Preparer role must select this pending action, repair the setup and resubmit it for approval by the first administrator, OR

The first System Administrator must select this pending action, repair the setup and resubmit it for final approval.

User Setup – Incomplete Send to Repair

New User has registered, been entitled and approved by the first System Administrator and is being sent to repair at the setup stage by the final approving System Administrator but the transaction (during the repair stage) is left incomplete (lost connection/timed out).




Managing Existing Users

As a System Administrator, use the User Authorisation Summary service to take action on pending

transactions relating to existing Users.

User Authorisation Summary—Managing Existing Users

In managing existing Users, use User Authorisation Summary to approve, review modify or reject existing:

User profiles

User access level

Security Information Resets (SIRs)

User reactivation

User deletion

For customers with Sole Administrative Control, the changes are processed immediately after the System

Administrator completes the setup and entitlement process.

For customers with Dual Administrative Control, a second System Administrator must approve changes

to User registration status, entitlements, and authorisation levels. For customers under Dual

Administrative Control with Preparer role, two System Administrators must approve the changes initiated

by a User with Preparer status.

For detailed information on every type of pending action related to managing existing Users under User

Authorisation Summary, refer to the following table.

List of other pending actions: manage existing users



Security Information Reset


Security Information Reset – Awaiting

User has submitted new security information and is awaiting approval by System Administrator

System Administrator must select this pending action and approve the new security information


Security Information Reset – Awaiting

User has submitted new security information and is awaiting approval by System Administrator

System Administrator must select this pending action and approve the new security information

Security Information Reset – Pending Approval

User has submitted new security information, submission has been approved by first of two System Administrators and is awaiting approval by second System Administrator

Second System Administrator must select this pending action and approve the new security information

Access Control (entitlement changes)


Access Control – Incomplete Entitlements

A System Administrator has initiated User Entitlement changes that are yet to be completed

A System Administrator must select this link to complete the entitlement changes



A System Administrator has initiated User Entitlement changes and saved them as incomplete


Access Control – Pending Repair

A System Administrator has sent the User’s entitlement changes to be repaired

A System Administrator must select this link to repair the User entitlement changes





Access Control – Pending Approval

System Administrator has changed the entitlements for an existing User and is awaiting approval by second System Administrator

Second System Administrator must select this pending action and approve the entitlement changes

Access Control – Incomplete Approve

If during the approval process, any of the steps fail to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’

The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process



A System Administrator with Preparer role has initiated User Entitlement changes that are yet to be completed


Access Control – Pending Review

User with Preparer role has changed the entitlements of an existing User and submitted the changes for first of two approvals by a System Administrator

First of two System Administrators must select this pending action and approve the changes

Access Control – Pending Approval

User with Preparer role has changed the entitlements of an existing User, changes are approved by the first of two System Administrators and is awaiting approval by the second administrator

Second of two System Administrators must select this pending action and approve the changes

Access Control – Incomplete Approve



User Reactivation


User Reactivation – Pending Approval

A System Administrator has reactivated an existing User and is awaiting approval by a second administrator

Second of two System Administrators must select this pending action and approve the reactivation

User Reactivation – Incomplete Approve



User Delete


User Delete – Pending Approval

A System Administrator has deleted an existing User and is awaiting approval by a second administrator

Second of two System Administrators must select this pending action and approve the User deletion

User Delete – Incomplete Approve



Modify Multi-User Access Level by Account


Multi-User Access Control – Pending Approval

A System Administrator has made multi-user service entitlement changes for an account and is awaiting approval by a second administrator

Second of two System Administrators must select this pending action and approve the entitlement changes

Dual (with Preparer role) Administrative Control

Multi-User Access Control – Pending Review

User with Preparer role has made multi-user service entitlement changes for an account and submitted the changes for first of two approvals by a System Administrator

First of two System Administrators must select this pending action and approve the changes





Multi-User Access Control – Pending Approval

User with Preparer role has made multi-user service entitlement changes for an account, changes are approved by the first of two System Administrators and is awaiting approval by the second administrator

Second of two System Administrators must select this pending action and approve the entitlement changes

Multi-User Access Control –

Incomplete Approval

If during the approval process, the transaction fails to process (lost connection/timed out), the entire pending action is temporarily set to ‘Incomplete Approve’ (Note: Approval for some individual entitlement changes in the transaction may have been processed)

The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the approval process.

Modify User (profile changes)


Modify User – Pending Approval

A System Administrator has modified the profile of an existing User and is awaiting approval by a second administrator

Second of two System Administrators must select this pending action and approve the profile changes

Modify User – Incomplete Approve


The initiating System Administrator can recover the incomplete transaction by selecting this status and completing the process

System Administration: User Management · 4. On the Access Control page, select the Administrative...

Documents

Transcript of System Administration: User Management · 4. On the Access Control page, select the Administrative...