In this page, user will find more information about the Admin module and more specifically on
- Company information
- Company details
- Sub units list
- Access rights
- User list
- Categories
- Exchange rate
- Users interest rates
- Security settings
- Messaging - view/modify messaging settings of your company
- Dashboard setting
- User list
- User details
- Change the user id
- User companies
- Authentication config
- Access right config.
- Login user details
Company Information
You can find Company Information when you Click the arrow down icon on the right of the screen.
This page allows you to view and edit logged in user’s company profile.
Assign Roles: Group Companies Admin
Below are the different tabs you can view.
Company details
The ‘Company Details’ tab contains company important information such as name, address, postal code etc. It allows user to review and ‘Edit Company Profile’ of logged-in user’s company profile and ‘Add Company’ by adding a Business Unit as a subsidiary of the displayed company.
Assign Roles: Group Companies Admin
There are three types of organizations that can be registered on the platform: Central Treasury, Business Unit and Bank.
Central Treasury refers to Treasury or Head Office. It is the financial controlling centre for all subsidiaries, legal entities (Business Units) registered under it. Central Treasury can monitor all transactions and users registered under it. Central Treasury can also see all transactions of Business Units.
Business Units are subsidiaries or legal entities registered under a Central Treasury. It is possible to register business units under another business units in a corporate hierarchy. Users registered under a business unit can see transactions of all business units registered below their unit but cannot see transactions of other business units.
Banks are registered outside of the corporate hierarchy. They can send and receive transactions from the Central Treasury or Business Units using the @GlobalTrade channel.
Sub units list
Sub-Units List is used for viewing only group of companies or children companies associated with the same Head Office (Group Companies).
To create the child company of the Head Office, click ‘Add Company’ and enter all mandatory fields marked with red asterisk *.
‘Edit Unit Hierarchy’ allows user to update the hierarchy of the sub-units. This feature changes the corporate hierarchy structure and is used when required to move a unit from one company structure (i.e., Head Office) to another (i.e., another unit).
To add a New Business Unit (BU) as a subsidiary of your head office, go to Sub-Units list tab.
You can also register business units under another business units. Only Group and System Admins can register the new company.
Assign Roles: Group Companies Admin
How to Add a New Business Unit
In the sub-units list, click on the Add company on the bottom right and follow the below procedure:
Register New Sub-Units in 5 steps
Step 1: Enter registration details for the First User of the company. Complete the Mandatory information marked with red asterisk* Note the different parameters used for Standard or SSO setup.
Step 2: Enter New Business Unit Detail , after input all the information, Click on Next.
Step 3: Review all the information before approval
Enter Password+ Click Next>Save to complete the registration for Standard setup.
Step 4: Next step is to Activate the new company & first user. When the 2nd Admin user approve the First User, the new company will be activated simultaneously.
Approval by 2nd Admin user
Step 4a: Go to User List tab, Search the First User
Use the Search icon to search the First User (search by First Name, Last Name or Email). Another quick way is to search by “User Status=New”. Click to enter to User Details.
Step 4b: Approver (2nd Admin user) will review and approve the First User
When 2nd Admin user approves the registration. User profile status will update from “New” to “Active”
To Activate the First User, Click Approve Activation
Step 5: System sends a confirmation email to the First User’s email address with a one-time email link. The link loads the page where the user is asked to setup the password.
The password must satisfy the rules listed on the page. The rules may differ from the sample screenshot above as they are configured by your system administrator.
If the user already exists in the system, the system does not ask the user to setup the password again. User can start using the system as soon as the 2nd Admin user approves it.
Once the First User is approved, the New Business Unit will be activated.
Access rights
To decide what a certain role can do and can not do. You create a collection of roles to create an access right and then assign an assess right to the user.
Assign Roles: Access Rights Creator
You can Click Add New and follow below steps to setup the new Access
Step 1: Select the Organization to setup the Access Rights
Select “Head Office” or “Business Unit”, Click Next
Note that Access Right can only be used in their respective organization. i.e. Access Right created in Head Office can only be attached to Head Office users.
Step 2: Input Access Right Name and setup the required roles or responsibility
Click [>] button to move the required roles available to selected roles
Complete setup, Click Save à Transaction saved and returned to Access Right List
Step 3: You want to Edit the Access Rights. For example, retrieve the Access Rights: from the Access Rights list. Click the Edit icon
For modification of an existing access rights, it will automatically update the users having this access right, this is why 4 eyes principle apply.
Step 4: The modification will take effect once approved by your company administrator.
For Approval, Go to Access Rights List
Retrieve the transaction, Tick the checkbox to select the transaction, Click the “tick” to Approve.
In terms of roles, you can find sometimes three levels for a same roles, for example :
- Alarm admin : for the user profile
- Alarm Company admin : for the whole company
- Alarm group admin : only for a specific group
In terms of status, some roles defined if the user can set an instrument to a specific status:
- GI Reset to in progress (not executed): Set to in progress from the “non executed” status
- GI Reset to in progress (pending approval): Set to in progress from the “pending app.”
- GI Reset to in progress (ready for review) : Set to in progress from the “ready to review ”
- GI Reset to in progress (ready to apply): Set to in progress from the “ready to apply”
- …
Some explanation on the abbreviation :
- COL : Export Collection
- DCI : Import Coll
- EDS: Export document set
- ELC: Export Letter of Credit
- ILC: Import Letter of Credit
- GI: Guarantee issuance system : GTI
- GR: Guarantee received system: GTR
Categories
Add, Edit and View the Categories name and their options (Category values). This is used to categorize information like Business group, Product group for management reporting. For example, the user can only approve transactions in the EMEA regions and more specifically in Canada.
Assign Roles: Categories Admin
Click on Categories Setup
Tick the Checkbox under Category Enabled
Enter Text for Category Name
You can set up the inter‐categories dependency and arrange them in a required order.
Depends On: Select value from drop-down list if required
Click Save
Category Options
The categories (10 different ones) below are customizable.
Click Categories Options Setup. This is to create the List of Values under each Category.
Add the List of Values for each Category Name.
Go to the bottom of page, ADD NEW OPTION
CATEGORY: Select from dropdown list: Country, Regions or Product group
OPTION: Input new value in text format and tick the checkbox against appropriate system,
e.g. Region new value: “High Growth” under Guarantee Issuance system
First Click Add and then Click Save] The new value (category option) will be saved.
If you want to delete the option, Tick the box under Delete. First Click Delete and then Click Save
Post Conditions: Go to Transactions>Guarantee List to test the configuration setup in Internal Information, Create a new Guarantee Transaction or retrieve any existing transaction, Click Edit Internal information button to enter the page to check the Category values are setup accordingly.
Exchange rate
Add, Edit and View the actual and historical currency exchange rates.
Assign Roles: Exchange Rate Admin
Top header, use the Filter function on Currency Code, select the currency from the drop-down list
Click Edit to update Currency Code, Rate & Last Updated Date.
Post Conditions: Go to Transactions>Guarantee List to test the Exchange Rates setup, Create a new Guarantee Transaction or retrieve any existing transaction, the Exchange Rates is used for converting Nominal Amt to Equivalent Amt (Company Base currency setup).
Users Interest Rates
The interest Rates tab is used to view the list of foreign currency interest rates.
Company administrator can upload interest rates from sources like LIBOR. These rates can later be used in commission and fee calculation
Click on “Edit” to enter new rate per currency code. User has to enter also the last updated date for audit purpose.
Security Settings
Security Settings displays the security settings of the active company. Users can check the following information from this page:
- Privacy Policy Disclaimer: Allows the user to enable and display a policy disclaimer in a free text format ( 2500 characters).
- Q-form Settings: A non-registered quick form user needs to use an email address for receiving the one-time link for the Q form Application. From the Q-form setting, the system admin can list the email domain that the user can use to receive the one-time like. For example, if the admin adds globaltradecorp.com as a domain, non-registered users with an email address like exampleuser@komgo.io can receive the one-time link. But exampleuser@gmail.com will not receive the one-time link.
- IP filter Settings: is used for controlling the range(s) of IP addresses from which users can access the system. This feature enhances the system security by limiting IP addresses of the workstations from which users can access the systems. For example, if a company wants to prevent the users from accessing the system from non-office computers, the system administrator can limit the user access by specifying the IP range of the office PCs.
Use the ‘Edit’ button to make changes in the current security settings.
Messaging - View/modify messaging settings of your company
Messaging has two different sections:
- Messaging Processing configuration
- Messaging Networks Configuration
In the first section, administrator can control message auto processing rule. By default, the only process complete messages message is set to ‘Yes’. It means that only complete SWIFT messages will be processed. This means it is only when the two part of the Swift message (Index + content) are received that the message will be processed.
By default, the ‘Auto process SWIFT messages’ is disabled, i.e., it is set to ‘No’. When it is disabled, user will need to press the ‘Process’ button on the incoming SWIFT message to create a transaction.
In the second section, administrator can activate or deactivate communication channel.
Use the ‘Edit’ button to make this changes.
If user select “Yes” à new field will appear letting the user inserting the BIC Code to exclude if any, separate by commas.
If user select “Specify” à two new fields will appear letting the user inserting the BIC Code to exclude if any, separate by commas and on the first field user can specify which MT message should be processed.
Message admin user will let the user specify the email address of the person who should received the alert
Dashboard Settings
In order to be able to select and display a dashboard in the home page, a report should be created.
Two possibilities for dashboards : pie chart or bar chart.
Once on the template, click on “edit template” and tick the box “use as graph”
Define the “X” and “Y” axis based on which information should be display. Enter the number of the line based on the template page.
Ex: for Credit line Borrower : line 2 à à Enter 2
For Total available base : line 7 à Enter 7
Click on save and then on generate report
Then go on the company information à dashboard settings à Click on “edit”
The regularity of the update of the report depends on the frequency saved under the report settings. Select daily with multiple hours as a frequency to have the dashboards being update every day multiple times.
User can set up to 3 dashboards available for each module.
Select for every module the name of the report that has been set as a chart
Click on “save”
Go back to the home screen to see how the chart is displayed
User list
Add, Edit and View the list of users under the respective company base on your access.
Head Office can view all the Business Units.
Assign Roles: User Admin
You can go to the Sub-Units List to retrieve the Business Unit you want to create the New User.
Select & Click the Sub-Unit to create the New User
Select User List / Click Add New User
Enter New User information
Enter the Mandatory information marked with red asterisk* as follows: E-MAIL, USER ID, FIRST & LAST NAME, PRIMARY AUTHENTICATION PROVIDER (dap/none), TITLE, ACCESS RIGHT, SYSTEM LANGUAGE
Go to the Bottom of page, Enter Your Password*
Click Save, New User is registered pending for 2nd Admin user approval (same process as described under sub-limit list)
To delete a user, you have to suspend it first. Go the user list à user profile you want to delete à suspend à the delete button appear on the menu. Even when you delete a user, you can still restore it on the user list.
Please find all the status below:
|
User Profile Status
|
|
| New | Account newly registered, waiting approval by the 2nd Admin |
| Active | Account normal access to the system |
| Locked Out | Account has been temporarily blocked due to multiple invalid login (3 times) |
| Suspended | Account suspended by the administrator, temporary action |
| Deleted | Account has been deleted |
If there is a pending change on a specific user, the change will appear under the column “ change request”, admin will then be able to click to access to the change request.
User details
This page displays and edit the logged‐in user’s information. You can also change password and update security questions. Primary authentication provider by default means email address + password: this is the way you are connecting to the platform.
On this page you can :
- Edit details : to modify any information except the email address of the user, your own access right and system access.
For all changes applying to the user itself, a second approver is not required. For any modification to another user, a second admin needs to confirm the changes in red (4 eyes principle).
Example of changes available are:
- By default will be the system to which you will land when you connect.
- Messaging off: to delete confirmation pop up in the sytem
- Floating buttons: always the case by default
- Restricted profile : for top level user, can not be edited by other users
- Change password: to update the password
- Update security questions: It is used as verification when you request a password reset
- User lists : to go to the complete user list
Change the user ID
To be able to change the user ID, the first action to take is to suspend the user. Once on the user profile, click on the tab “User companies details” and suspend the user from all business unit.
Once the user is suspended, click on “edit details”. Ensure the Primary Authentication provider is “none”.
You are now able to modify the User ID and then save it with “save”. Please ensure that the primary authentication provided and the user is re-activate before finishing this step.
User companies
This page displays the list of all business units the user has access to. In this example, Business Unit 1 and Corporate Treasury.
In this page, you can suspend all the units and the status will move from active to suspend.
Authentication configuration
This page is to set up SSO or change the way the user wants to authenticate.
1. Go in the user profile.
2. Suspend all access to business unit under user companies under the “User companies tab”
3. Go back to user details to change the primary authentication provider to “none”
4. Go to the Authentication config page and click on “edit”
5. Click on “add new profile” under the authentication details and enter the User ID details.
6. Do not forget to reactivate the user under the user companies
Access right configuration
Has to be configured first in the system config files and then the tab will be available. This functionality enable the user to give multiple access rights under the same business units. Sometimes used for user acceptance testing to facilitate it or to segregate permissions. For example, restricted access to request guarantee and then global access to view all guarantees.
To make any changes to the access right, you always need to suspend the user under the user companies.
Once suspended, the user can edit the access rights.
The categories (10 different ones) below are customizable (see printscreen below) . For example, the user can only approve transactions in the EMEA regions and more specifically in Canada.
Login user details
This page displays the log‐in history of the user