SECURITY008 - Organization entities, user roles, and access levels

XTRM is a global multi-tenant payment system. This means we have one organization account (Prime Entity) for a company worldwide with separate entities for regional subsidiaries or any legal entity owned by the organization. The regional user administrators can create and separately manage their own entity profile, users, wallets, and role-based access as needed for their local requirements.

Organization and entities give you a way to reduce your operational risk by centrally managing all of your accounts and the users who may have access to them and configuring your Organization-wide policies. 

To Summarize:

• Only one org account is needed for your company globally. 
• You can set up as many regional or subsidiary entities within the organization as you like.
• You can add as many single-entity and multi-entity regional/subsidiary users as you like.
• Wallet and service access are strictly controlled via security roles and settings.
• Existing master admin, controller, or manager users can add new regional users. 
  How to add entities and users to global company accounts

Master Admin Consideration

One designated person, typically with signatory authority, is designated the "Master Admin" and should register the Org Acct. (Prime Entity) with the company headquarters details, i.e., register ACME Inc HQ. and associated address (Not ACME Region 1 or ACME Region 2). If you are a company regional office, you must register your Org Acct (Prime Entity) first. This can be done at www.xtrm.com - choose company registration. If an Org account (Prime entity) already exists, you will be notified and asked to contact the existing master, controller or manager users to add you as a user for your region. 

As XTRM operates as a financial service account under similar regulatory standards as a bank, selecting the master admin for your company account should prioritize individuals possessing financial signatory approval within your company. Typically, this individual belongs to the executive team, treasury department, or finance group. This person is not solely responsible for managing the XTRM account but can delegate responsibility to regional entity controllers, managers, and standard users.

Entities, user roles and access levels handle the separation of access to wallets and funds. Regional entities can have specific access to regional entity wallets and functions. It is identical to separate accounts from a compliance and security perspective but provides global account compliance and consolidated reconciliation reporting. It also simplifies onboarding times and ensures more accurate and faster payments whilst ensuring only the right people access the right wallets, funds, and services.

Some key terms

Entities 

Review the instructions in this document on how to create new entities and add users to your global organization account How to add entities and users to global company accounts

User roles and access levels 

There are 4 levels of access. A master, controller, or manager user can edit any users that are in the entities they manage and are of a lower level. 

✓ = Yes    X = No   O=Optional (Access Level Setting)

1. Create the User account by completing the fields.

2. Selecting System Access level other than "Full" will direct you to this page to set specific access per User.