Setting Up Employee and Restricted Account Security

Related Topics

The ability to monitor and restrict activity on the accounts of your credit union's employees and other accounts is a vital function within your internal security procedures. With Employee/Restricted Account Security, you can do the following:

  • Identify employee or restricted accounts using the Account Restriction dropdown list on the Contact Information tab.
  • Restrict online access to employee accounts by all except authorized individuals.
  • Use security groups to determine the level of information users can view or maintain.

Portico does not include your employee accounts in the list of accounts displayed when you perform a member search. Therefore, your employees cannot use cross-reference transactions to locate the accounts of fellow employees.

Activity on employee/restricted accounts appears on the Non-Financial TXN Register - Employee Report 036 and Financial Transaction Register – Employee Report 445. Portico still performs back-office transactions on employee/restricted accounts and allows access to employee/restricted accounts through ATMs and Audio Response.

Implementation of employee and restricted account security is a multistep process. The following list summarizes the steps involved:

  1. Select the Employee Lockout checkbox on the Credit Union Profile – Security tab to restrict access to employee/restricted accounts.
  2. Flag all restricted accounts using the Account Restriction dropdown list on the Contact Information tab. The valid options are: No Restrictions, CU Employee - Restricted, Report Only - No Restrictions, Special Account - Restricted, and Non-Employee - Extended Restriction.
  3. Use Reporting Analytics to generate a report query of all the employee/restricted accounts. You can use this list to define the restricted accounts on the Accounts Associated With window.
  4. Define restricted accounts for each user on the Accounts Associated With window. Restricted accounts may be accounts that you tie directly to a user or may also be a family member account. If you list a member on the Associated Accounts With window, the member is a user or related to the user.
  5. Add users to the desired security group: Employee Security – Administrator, Employee Security – User, Employee Security – User Has No Access, or Employee Security - User with Special Restrictions. Select the Employee Lockout checkbox on the Credit Union Profile - Security tab if users belong to the Employee Security - User Has No Access security group or a credit union-defined security group containing the EmplSecurity - User Cannot View Any Employee Accounts permission.

  6. Submit the Portico Extra's Questionnaire (https://www-prod-porticousers.fiservapps.com/Documents/Questionnaires/PorticoExtras_Quest.pdf).

  7. If your credit union uses Portico's print functionality, you can elect to print employee balances on receipts using the Print Employee Balances checkbox on the Credit Union Profile - Print tab. If not selected, employee balances do not appear.
  8. Add the appropriate security group to each user’s profile.

  9. To lock the member lookup field on the Portico toolbar, follow these steps:

    1. Open the Security Group Permissions – Update window.

    2. Add the Portico – User Can View By Member Number Only permission to your credit union-defined security groups.

    This permission prevents users from looking up a member using any identifier except the member number.