Multi User Authorisation and Privilege Delegation

A major benefit of the multiple account user and privilege delegation features is the ability for customers to enforce dual or multiple authorisations for account transactions online, as you would currently do with multiple account signatories in the offline environment.

If an Internet Banking profile defines that more than one person must authorise transactions and requests on behalf of the customer, the following actions will be held in a pending state for 90 days to allow sufficient time for the transaction to be authorised:

• any value transaction, excluding uploads of a Payments File
  
• any transaction limit increase or decrease
  
• any delegation of authority to another User, and subsequent changes to Delegated User authority

Please Note: Any transaction still requiring additional authorisations after 90 days in the pending state, will be automatically deleted.

Authorisers on the account can be notified of any pending authorisation requests via Secure Mail, email (via the email address registered for the customer), SMS (via the mobile number registered for the customer) and the notifications area on the Home screen.

Yes. More authorisers can be created than the number of authorisers required to approve each transaction. For example, all four company directors may be defined as authorisers in Internet Banking, but only two of these four need to authorise transactions and requests at any time.

Because an Internet Banking profile can have one or more people associated with it, different types of account users will exist. There are four types of people who can access Accounts through Internet Banking

• a Customer with authority to operate on the account individually; or
• a Related Account User, who is a signatory on the Account, has authority to operate on the Account individually or has authority to operate on the Account as one of a two or more persons to sign method of operation and has been granted Internet Banking access to the Account by both the Customer and BOQ; or
• an Authoriser, who is a signatory on an Account that requires more than one person to operate on the Account, and where Internet Banking access has been established for each signatory to the Account; or
• a Delegated User, who has been granted Internet Banking access to the Account by a Customer, Related Account User, Authoriser or another Delegated User.

BOQ customers, Authorisers and Delegated Users will be able to use Internet Banking to delegate access to one or more Delegated Users. The person who creates the Delegated User will also set the Delegated User’s Personal Access Code (PAC).

No. The Delegated User will not be required to sign an authority or any other registration form as part of their set-up, however if they are given access to make value transactions*, they must satisfy the Customer Identification Requirements at a branch. The new Delegated User will have view only access until the Customer Identification Requirements are met.

The Customer (Account Holder) should consider carefully whether to allow Delegated Users to Delegate their Internet Banking rights. As the Account Holder you will be responsible for the actions of all Users accessing your Internet Banking profile, including Delegated Users.

*A value transaction is any transaction where an amount greater than zero is transferred from a nominated account.

Customers/Authoriser/Delegated Users can choose from a number of different levels of access for each account and for each Delegated User:

The word Restricted is displayed for any accounts where the access rights for the account for the Delegated User contains either None, CreateNoView or ExecuteNoView.

If a delegated user has a view component for every function on each account they can access, they will be able to view all secure mail messages sent and received. This will include secure mail messages which are related to accounts that the delegated user may not have access to.