Business User Roles for Banks
Head’s Up
In an effort to make this section of the Knowledge Base easier to navigate, some User Management page content has been re-organized into new sub-pages:
Banks
Credit Unions
- User Management for Credit Unions
- Business User Roles for Credit Unions
- Entitlements and Permissions for Credit Unions
Updating any bookmarks you may have stored for this page content is recommended.
A business user’s role can be updated in their profile settings. The following table helps familiarize business users with available roles:
| Role | Admin | Viewer | User |
|---|---|---|---|
| Move funds (create wire, upload ACH, etc.). | Y | Y | Y |
| View users | Y | Y | |
| Create users | Y | ||
| Delete users | Y | ||
| Unlock users | Y | ||
| Reset password | Y | ||
| Hold account | Y | ||
| View user profiles | Y | Y | |
| Edit user profiles | Y | ||
| View user permission | Y | Y | |
| Edit user permissions | Y | ||
| View user account permissions | Y | Y | |
| Edit user account permissions | Y |
Create Users
Depending on a business user’s role, a newly created member of the business might need access to User management. If so, an institution employee must enable the User management entitlement for the member of the business.
Create Users in Banno Online
In Banno Online, business admins create a new business user by selecting Create user in the Manage users window.
- User management
- Manage users
- Create user
Then, on the Create user screen, the business admin provides the following details:
- First name
- The new business user’s first name.
- Last name
- The new business user’s last name.
- The new business user’s email. A Banno-generated email with a magic link is sent to this email address so the new business user can create their account credentials and log in to the Banno app.
- User role
- The user role (reference the table above) determines what a business user can do within User management.
Default permissions set on the host are automatically assigned to new business users. To modify permissions, a business admin can update them at any time in the business user profile within User management.
After completing this initial setup step, the business admin then has two additional steps to complete, including high-risk authorization and enabling accounts.
After providing the new business user’s details, the business admin selects Create user and completes a high risk authorization by entering their Banno app password. If there are three incorrect attempts, the business user is logged out of the app and their account is locked. Their account will then need to be unlocked.
Following a successful high risk authorization, the Enable accounts window displays. At this point, the new business user is yet to be informed of a created profile, has no credentials, and can’t to log in to the app. In the Enable accounts window, the new business user’s avatar, name, role, Pending status, and option to Enabled accounts display. By default, no accounts are automatically enabled, and the business admin needs to manually enable at least one account for the new business user.
To enable one or more accounts, the business admin clicks Select and the Account access window displays the business’s accounts from which to select. The business admin can search accounts by account name and quickly enable or disable permissions to all accounts. After enabling one or more account and selecting Done, the business admin automatically navigates back to the Enable accounts window, which is then updated to display the number of enabled accounts (ex. 4 accounts, 12 accounts, All accounts, etc.). Although the account access displays as enabled, know that the accounts still won’t display as enabled in the new business user’s profile.
With the business admin still on the Enable accounts screen, they must next click the Enable Accounts button. A success message will appear and allow the business admin to select from one of the three following buttons:
- Send email invite
- If the business user’s account or user permissions don’t need updating, the business admin should send an email inviting the new business user to enroll in the Banno Digital Platform. After clicking the button, the business admin automatically returns to the Manage users screen where the new business user displays in a
Pendingstate. - Edit permissions
- If the business user’s account or user permissions need to be updated before they’re invited to enroll in the Banno Digital Platform, the business admin should click Edit permissions. This automatically navigates the business admin to the new business user’s profile where permissions can be updated and then invited. The new business user displays in a
Pendingstate. - Done
- Clicking Done returns the business admin to the Manage users screen where the new business user displays in a
Pendingstate. An email invite doesn’t send to the new business user.
Once the success message appears, the selected accounts display as enabled in the new business user’s profile.
If the business admin selects Create user and the business’s accounts fail to load, the Enable accounts window will not appear. Instead, the error message Accounts failed to load will display. The business administrator can click View profile to enable accounts from the business user’s profile, or they can click Done and automatically navigate to to the Manage users screen where the new business user will display in a
Pending state.Create Users in Banno People
After creating the business and first business user on the core, institution administrators can create a business user in Banno People by selecting Create user in the Manage users window.
- Banno People
- Users
- Business profile
- Users
- Create business user
Before an institution administrator can create a business user, they need both the Create everything permission and Edit everything permission enabled in the People section under Organizations and organization members.
An institution administrator creates a new business user by selecting Create user in the business’s Users window. Then, the institution administrator provides the following details in the Create user screen:
- First name
- The new business user’s first name.
- Last name
- The new business user’s last name.
- The new business user’s email. A Banno-generated email with a magic link sends to this email address so that the new business user can create their account credentials and log in to the Banno app.
- User role
- The user role determines what a business user can do within User management.
New business users are created with default permissions as configured in the core.
After the business user’s details are entered, the institution administrator clicks Create user and the Enable accounts window displays. At this point, the new business user is yet to be informed of a created profile, has no credentials, and can’t log in to the app. In the Enable accounts window, the new business user’s avatar, name, role, Pending status, and an option to view Enabled accounts are displayed. By default, no accounts are automatically enabled, and the institution administrator needs to manually enable at least one account for the new business user.
To enable one or more accounts, the institution administrator clicks Select and the Account access window displays the business’s accounts to select from. The institution administrator can search accounts by account name and quickly enable or disable permissions to all accounts. After enabling one or more account and selecting Done, the institution administrator automatically navigates back to the Enable accounts window where it’s updated to display the number of enabled accounts (ex. 4 accounts, 12 accounts, All accounts, etc.). Although the account access displays as enabled, know that the accounts still won’t display as enabled in the new business user’s profile.
With the institution administrator still on the Enable accounts screen, they click the Enable Accounts button. A success message displays and the institution administrator selects from one of the three following buttons:
- Send email invite
- If the business user’s account or user permissions don’t need updating, the institution administrator should send an email inviting the new business user to enroll in the Banno Digital Platform. If the email invitation successfully sends after clicking Send email invite, a success toast displays on the Users window after the success message automatically closes.
- Go to profile
- If the business user’s account or user permissions need to be updated before they’re invited to enroll in the Banno Digital Platform, the institution administrator should click Go to profile. This automatically navigates the institution administrator to the new business user’s profile where permissions can be updated and then invited. The new business user displays in a
Pendingstate. - I’m done
- Clicking I’m done returns the institution administrator to the Users screen where the new business user displays in a Pending state. An email invite doesn’t send to the new business user.
Default Permissions
Default permissions are automatically assigned to new business users and can be updated on an individual basis with User management in the Banno app. Default permissions themselves can be managed by an institution on the host, and an institution can refer to NetTeller documentation for more information.
Send Invites
By default, the link in the email invitation is good for 7 days. This can be customized by submitting a ticket to Jack Henry with the request.
A business or institution administrator needs to invite newly created business users and business users with a Pending status to create their credentials so that they can log in to the Banno app. The invitation is an automated email generated by Banno and includes a link that takes the business user to a screen where they create their Banno username and password. Any time a new invitation is sent to the user, the links in any previous invitations become expired.
Send Invites in Banno Online
The business administrator can send the invite in one of two ways:
- When they successfully create a new business user, select Send an email invite.
- The business administrator emails an invite from the business user’s profile by selecting Invite at the top of the profile.
In the new business user’s profile, a notification banner displays at the top of the screen: [Business user’s first and last name] account is pending. Invite them to complete set-up of their account. A business administrator can only invite the new business user if one or more account is enabled. If no account is enabled, the error message Unable to invite user displays when clicking Invite. To enable one or more accounts for the new business user, an account’s Access permission needs to be selected. After enabling one one or more account, the business administrator can refresh the page to ensure the screen updates. Then, they can successfully select Invite to send an email notifying the new business user to enroll in the Banno Digital Platform.
The name of the business administrator who sent the invite and the option to click Join display in the email. After clicking the link, the business user automatically navigates to the app enrollment window and creates their username and password. After successfully creating their credentials, they view a Successfully created account message and click the Sign in button to navigate to the Banno Online login screen. If the business user unsuccessfully creates their username and password, they view an error message and should retry creating their credentials.
If a business administrator sends multiple email invites to the same business user, only the most recent email with the link works for the business user to use. The business user has up to seven days to enroll in the Banno Digital Platform before the link expires, and the link can only be clicked on once. When the link is clicked, the token is redeemed and refreshing the page results in an error—a new invite needs to be sent and clicked. If the business clicks an older, expired, or redeemed link, the message Invitation link failed displays and they need to click on the latest or newest link.
Send Invites in Banno People
New business users can be invited from Banno People by institution employees with the Edit everything permission. The institution administrator can send the invite in one of two ways:
- When they successfully create a new business user, select Send an email invite.
- The institution administrator emails an invite from the business user’s profile by selecting Invite at the top of the business user’s profile.
In the business user’s profile, a notification banner displays at the top of the screen: [Business user’s first and last name] account is pending. Invite them to complete set-up of their account. The institution administrator clicks Invite to send an invitation to the business user.
The name of the institution administrator who sent the invite and the option to click Join display in the email. After clicking the link, the business user automatically navigates to the app enrollment window and creates their username and password. After successfully creating their credentials, they view a Successfully created account message and click the Sign in button to navigate to the Banno Online login screen. If the business user unsuccessfully creates their username and password, they view an error message and should retry creating their credentials.
Send Invites in NetTeller
A business administrator can invite a business user from NetTeller. The invitation from NetTeller contains a link to a NetTeller webpage - rather than the Banno webpage - where the business user creates their NetTeller and Banno credentials, the same as they do today. Once they create their credentials and log in, they can use the existing SSO to navigate to Banno. To log in to Banno, they use the same credentials they used to log into NetTeller.
Sending Invites in NetTeller BackOffice
While a financial institution can invite a business user from NetTeller Back Office, the invitation utilizes NetTeller enrollment and will bring the user into NetTeller rather than the Banno platform. For institutions without the Cash Management SSO enabled, this invitation will not work for the end user. As such, we recommend all invitations be sent directly from Banno People.
Unlock Users
Unlock Users in Banno Online
- User management
- click business user
- Unlock
When a business user incorrectly enters their login credentials three or more times, their profile status is Locked. A business administrator needs to unlock the account before the business user can successfully log in. At the top of the business’s user profile, a notification banner displays at the top of the screen: [Business user first and last name]’s account access is locked due to multiple incorrect login attempts.
A business administrator successfully unlocks a business user’s account by selecting the Unlock button in the banner. This changes the business user’s status from Locked to Active, and the business administrator can select I’m done or Send password reset link in the User successfully unlocked message that displays. If I’m done is clicked, the business user can immediately log in to the app. If Send password reset link is clicked, the business user follows emailed instructions so that they can reset their password and log in to the app.
Unlock Users in Banno People
- Users
- click business user
- Unlock
When a business user’s account is locked, a notification banner displays at the top of each page in the business user’s profile in Users: [Business user first and last name]’s account access is locked due to multiple incorrect login attempts. An institution administrator can successfully unlock the business user’s account by selecting the Unlock button in the banner. This changes the business user’s status from Locked to Active, and the institution administrator can select I’m done or Send password reset link in the User successfully unlocked message that displays. If Send password reset link is clicked, the business user follows emailed instructions so that they can reset their password and log in to the app.
Put a Hold Status on a User
The held status for a business user isn’t visible to the individual, and it disables the business user from logging into the app. For example, the held state could apply to a business user on a short-term leave. If a business user needs their app login access temporarily disabled, a business administrator can change it in the app, or an institution employee can change it in NetTeller.
Put a Hold Status on a User in Banno Online
- click business user
- settings
- Hold account status
- Hold
A business administrator can hold a business user’s account, preventing the business user from logging in to the app. After it is successfully on hold, a notification banner displays across the top of the business user’s profile: [Business user first and last name]’s account access is temporarily on hold. The hold status doesn’t change the business user’s status (active, locked, etc.) in their profile.
To remove a hold on an account, a business administrator selects the Remove button that displays in the notification banner at the top of the business user’s profile. Removing a hold is immediate, and the notification banner no longer displays. A success also toast displays when the hold is successfully removed from the business user.
Put a Hold Status on a User in Banno People
- Users
- click business user
- Overview and Security pages
When a business user’s account is on hold, institution administrators can’t remove the hold status from a business user’s account. A notification banner displays at the top of the Overview and Security pages in the business user’s profile in Users: [Business user first and last name]’s account access is temporarily on hold. Only an administrator at their business can remove the hold on their account.
Reset Passwords
A business administrator or institution administrator resets a business user’s password when they unlock the profile or use the profile’s settings. This prompts the app to send an email with the password reset link and instructions to the business user.
Reset Passwords in Banno Online
A business administrator unlocks a business user’s profile by sending a password reset link in User management.
- click business user
- Unlock
- Send password reset link
After the business administrator unlocks a profile, they can also reset the password by selecting the Send password reset link button instead of the I’m done button in the success message that displays.
- click business user
- settings
- Send password reset link
If the business user forgets their password or needs it reset, a business administrator assists by selecting Send password reset link in the business user’s settings. The business administrator then clicks Email that prompts the app to send the password reset link to the business user’s email. The business user must click the link provided in the email and follow the instructions to create a new password.
Reset Passwords in Banno People
An administrator can unlock a business user’s profile by sending a password reset link from Banno People.
- Users
- click business user
- Security
- Password reset
- Send link
If the business user forgets their password or needs it reset, an administrator user assists by clicking Send link in the Password reset section of the business user’s Security page. The business administrator then clicks Email, which prompts the app to send the password reset link to the business user’s email. Once the password reset link sends successfully, a success toast displays. The business user must click the link provided in the email and follow the instructions to create a new password.
Delete Users
Deleting Users in Banno Online
- User management
- click business user
- Delete user
Within the member of the business’s profile, a business administrator can delete the business user. Deleting a business user removes the profile from User management and Banno People. The business user is deleted from the core, as well as NetTeller BackOffice, and is unrecoverable.
Delete Users in Banno People
The functionality to delete a business user currently exists in Banno Online only.
History Events
Changes made in user management (updating a permission, modifying a business user profile, etc.) by an administrator user or business administrator create history events in Banno administrator. History events display in the business user’s Activity and can be sorted using the Permissions filter under User. History events for high risk authorization that are requested, failed, or passed by the business user are captured but do not yet display.
Banno Activity also records history events and can be sorted using the Permissions filter under People Users.
If changes occur on core or in NetTeller BackOffice, history events won’t display in Banno administrator.
FAQ
- Business admins can do everything, including edit, as well as delete and create once available. Viewers can see all details about a user, like an auditor, and viewers can also access user management. The user role is a standard user within the business and cannot access user management. This role comparison table can help familiarize business users with the available roles in user management.
There is not currently a partial admin role.
- The viewer role only applies to what the user can do in user management. It doesn’t apply to the permissions that the user can be granted for other parts of the application, but they can be permission’ed so that they only have view-only access.