6
Setting up the authorisation matrix
(Not applicable to companies that have enrolled in MPF services only. Only applicable to companies that require two
signatories or companies needing to perform trade transactions in Business Internet Banking.)
To enable dual authorisation on financial transactions or to perform trade transactions, the primary user
has to set up the authorisation matrix in Business Internet Banking.
Before you set up or amend the authorisation matrix, you need to determine which authorisation profile
is suitable for your Business Internet Banking portfolio. Please refer to the following case studies to find
out which category your portfolio belongs to. For a more detailed guide, please refer to Appendix A.
Assigning a signature group to an user
After setting up the authorisation matrix, the primary user can create/modify users according to the signature
group and matrix set-up:
• Each user can belong to either signature group ‘A’, ‘B’ or ‘None of the above’. For companies that require
dual authorisation or trade services, if the user does not belong to either group ‘A’ or ‘B’, he/she should
be put in ‘None of the above’ group, this implies the user has a zero transaction limit for authorisation
and he/she can only prepare transactions and/or perform enquiries.
• For both primary and secondary users authorising trade transactions, a per transaction limit must be
set and a signature group must be assigned.
Note: A primary user MUST assign himself/herself to a signature group to enable him/her to authorise transactions.
Maintenance of the authorisation matrix
• If dual management control has been selected, the set-up and maintenance of the authorisation matrix
will require approval by both primary users. The matrix can only be set up/maintained when there are
no outstanding items pending authorisation.
• The primary user can choose to stop dual authorisation by changing the dual authorisation option to
simple authorisation. After which, all transaction limits specified earlier in the authorisation matrix will
be cleared, except those for the trade account(s).
11
Case study 1 - Simple authorisation
Assuming an SME Company Limited has only cash management accounts registered in its Business Internet
Banking portfolio, and only one signatory is required from either one of the business owners to authorise
each transaction and the transaction limit of data entry clerk and officer are zero.
Setting up the authorisation matrix or assigning a signature group for secondary users is not required in
this case.
Position
No.
Data entry clerk
1
Officer
1
Business owner
2
Case study 2 - Simple authorisation for trade services transactions
Assuming an SME Company Limited has a trade account and a cash management account registered in
its Business Internet Banking portfolio and only one signatory is required from either the officer or the
business owners to authorise trade and other cash transactions, while the officer will have different
transaction limits from the business owners.
Position
No.
Signature group setting
Shipping clerk
1
None of the above (eg. no transaction limit)
Officer
1
Signature group A
Business owner
2
Signature group B
The authorisation matrix should appear as follows. Please refer to section 6.1 for more details.
>> S ecurity tips:
You must set up the Authorisation Matrix to
control the transaction limit if you want to
perform trade transactions online.
Note: Cash transactions will be authorised according to
the daily limit on the account in the user profile.
12
6
Case study 3 - Dual authorisation with one signature group
Assuming an SME Company Limited has trade accounts and cash management accounts registered in its
Business Internet Banking portfolio. Depending on the transaction amount thresholds, two signatories are
required from any of the following groups to authorise trade and other cash transactions for large transaction
amounts:
1) the finance manager and one of the business owners
2) the business owners
The finance manager will have the same transaction limits as the business owners.
Position
No.
Signature group setting
Shipping clerk
3
None of the above (eg no transaction limit)
Finance manager
1
Signature group A
Business owner
3
Signature group A
The authorisation matrix should appear as follows. Please refer to section 6.2 for more details.
Note: If two signatories are always required to authorise trade and other cash
transactions in your company, you should assign zero transaction limits
for all accounts under the signature group A (ie Single A column on the
screen).
13
Case study 4 - Dual authorisation with two signature groups
Assuming an SME Company Limited has trade accounts and cash management accounts registered in its
Business Internet Banking portfolio. Depending on the transaction amount thresholds, two signatories are
required from any of the following groups to authorise trade and other cash transactions for large transaction
amounts:
1) the shipping manager/finance manager and one of the business owners
2) the shipping manager and the finance manager
3) the business owners
The shipping manager/finance manager will have different transaction limits from the business owners.
Position
No.
Signature group setting
Shipping clerk
3
None of the above (eg no transaction limit)
Shipping manager
1
Signature group A
Finance manager
1
Signature group A
Business owner
3
Signature group B
The authorisation matrix should appear as follows. Please refer to section 6.3 for more details.
14
6
6.1 Simple authorisation for trade services transactions
1
Access Business Internet Banking.
2
On any of the pages click ‘Services’.
3
Two options for assistance in setting up
the authorisation matrix:
a You may select ‘Authorisation
Matrix’ and follow the steps below.
or
b You may follow the ‘Step by Step
Guide’ to complete the set-up.
15
4
Select ‘Simple Authorisation’.
5
Click ‘GO’.
6
Enter the transaction limits:
a If you want to apply the same limits
to all accounts, click ‘Apply’.
or
b You may set up different limits for
different accounts.
7
Click ‘GO’ .
8
Click ‘Confirm’.
9
An acknowledgement page will then
appear. Click ‘OK’ to complete the matrix
set-up.
Please ensure the primary users belong to one of the signature groups. Otherwise, they will not be able
to authorise any trade transactions. Please follow the instructions on section 8 to modify the user details.
16
6
6.2 Dual authorisation with one signature group
1
Access Business Internet Banking.
2
On any of the pages click ‘Services’.
3
Two options for assistance in setting
up the authorisation matrix:
a You may select ‘Authorisation
Matrix’ and follow the steps below.
or
b You may follow the ‘Step by Step
Guide’ to complete the set-up.
4
Select ‘Dual Authorisation’ and then
select ‘One Signature Group’.
5
Click ‘GO’.
6
Enter the transaction limits.
a If you want to apply the same limits
to all accounts, click ‘Apply’.
or
b You may set up different limits for
different accounts.
7
17
Click ‘GO’ .
8
Click ‘Confirm’.
9
An acknowledgement page will then
appear. Click ‘OK’ to complete the matrix
set-up.
Please ensure that the primary users belong to signature group ‘A’. Otherwise, they will not be able to
authorise any transactions. Please follow the instructions on section 8 to modify the user details.
6.3 Dual authorisation with two signature groups
1
Access Business Internet Banking.
2
On any of the pages click ‘Services’.
3
Two options for assistance in setting up
the authorisation matrix:
a You may select ‘Authorisation Matrix’
and follow the steps below.
or
b You may follow the ‘Step by Step
Guide’ to complete the set-up.
18
6
4
5
Select ‘Dual Authorisation’ and then
select ‘Two Signature Groups’.
Click ‘GO’.
6
Enter the transaction limits.
a If you want to apply the
same limits to all accounts,
click ‘Apply’.
or
b You may set up different
limits for different accounts.
7
Click ‘GO’.
8
Click ‘Confirm’.
9
An acknowledgement page will then
appear. Click ‘OK’ to complete the
matrix set-up.
Please ensure the primary users belong to one of the signature groups. Otherwise, they will not be able
to authorise any transactions. Please follow the instructions on section 8 to modify the user details.
19