Employee Security - Employee Profile

Screen ID:	USMAST-02
Screen Title:	Update Employee Security
Panel ID:	6180
Tool Number:	Multiple
		Click here to magnify

This window will appear when you use Add Employee (F6) on the first security screen, or when using the Empl Profile option on an existing employee ID.

This window is used to add or update the general details about an employee's security profile, including assigning vaults. When done, use Enter to save changes and return to the first security screen. This window also lets you set up template IDs, which can be helpful for creating general security settings and tool assignments that can be copied to other IDs, for more consistent settings across similar employee types. (See more about setting up employee templates below.)

When you add a new employee ID, the password will be automatically set to a temporary password of x1234 and will need to be changed by the employee. They'll be prompted automatically the first time they attempt to use the password after logging on, or they can use Tool #40 Change Employee ID Password.

How do I assign my employees to a branch and also a department?

Each employee ID is assigned a branch (or multiple branches) using the Vault #and Other authorized vaults options. You can review all of your terminals through the Device Configuration to ensure the correct branches are assigned to terminals. The Team code can be used to assign a CU-defined 2-character department code that is helpful when copying security settings between one ID and another.

Using Roving Teller

I have tellers that work at two different branches. How do I set them up so that they can activate their drawer and access the correct vault depending on the branch they are working at?

Setting Up Employee Templates

Templates are special types of employee IDs which can be used as the basis for assigning tools to new employees, as well as for auditing existing employee access by comparing against a benchmark of standard access settings. Creating a template ID works exactly the same as creating and setting up an employee ID, except that for a template ID the This is a template flag must be checked on this screen. An ID that is flagged as a template:

Will be locked and will appear highlighted in yellow on the main security screen, along with other employee IDs that are locked.
Cannot be used like a regular ID to access tools from the CU*BASE home page.
Can be copied to other employee IDs (or other template IDs) using the Copy feature on the main security screen.
Can be hidden from the list of regular IDs by using the Show... buttons on the main security screen.
Will be marked with a notation of ***TEMPLATE*** on various employee security reports.
Will not be counted in the “# of Employees” counts on the Assign Tools to Employees screen.
Will not be counted in total employee ID statistics on the Employee Profiles Analysis dashboard
Will not be included in counts on the Tool Usage Analysis (NOTE: If an existing ID was changed to a template, stats from prior to that time will still include that ID, from when it was not a template.)

Setting Up Xpress Teller Transaction Limits

If activated in the Xpress Teller configuration and this employee ID is configured for Teller Posting, a Teller Limits button will appear on this screen to allow you to set up Xpress Teller transaction limits. Click this button to access the screen where you set up limits.

Learn more here about Xpress Teller Transaction Limits.

NOTE: If Teller Posting is unchecked, and the teller has Xpress Teller transaction limits, they will be deleted. A warning message will appear.

Field Descriptions

Field Name	Description
Name	Enter the employee's full name.
This is a template	Place a checkmark here to flag this ID as a template. If later on this flag is unchecked, a security officer must use the Reset Password feature as usual so that the ID can again be used by a person from the CU*BASE homepage.
Vault #	Enter the primary vault number for this employee. This field is required for every employee; if the employee is not working as a teller and signing into a vault daily, use the branch number where the employee works most with CU*BASE.
Other authorized vaults	Use the Select button to reveal a screen where you can select the additional vaults an employee is assigned to. (Must have the “Teller Posting” checkbox checked.) NOTE: Tellers will only be able to post to a vault that matches their current workstation, meaning that Teller A who is working at branch ABC will only be able to post to a vault assigned to this branch. NOTE: If the employee is assigned to multiple vaults, their primary vault listed on the Employee Security Dashboard will have a plus + sign next to it. This indicates multiple vaults. NOTE: An employee profile can be configured with 99 vaults, one primary plus 98 other authorized vaults. If the employee profile is archived, only the primary vault will remain in the archived employee ID. The other authorized vaults will not be saved with the archived employee ID. As of the 20.10 release, additional vaults are added to the VAULTASSIGN file. They no longer are saved in the SECMAST file. Additional vaults previously stored in the SECMAST file were marked as UNUSED in the SECMAST file at the conversion to the release. I have tellers that work at two different branches. How do I set them up so that they can activate their drawer and access the correct vault depending on the branch they are working at?
Team Code (CU-defined)	This field is optional, but can be used to group employees together based on a common job function. This can make it easier to assign security, as security for one profile can be copied to all other employees with the same team. Use any 2-character code, with either alphabetic or numeric characters.
Teller posting	Check this box to authorize the employee to post in the teller processing program. Leave this box unchecked if teller posting is not allowed for this employee. The teller’s cash must be sold back to the vault and EOD must be run before you can uncheck this box.
Job classification	On the Home Page the Recommended Tools toolset button lets users see how their access privileges match up to the access recommended by our AuditLink security consultants, based on this system-defined job classification code. This feature is completely optional. In order for these recommendations to be visible, the security officers must first assign one of the standard job classification codes to each employee profile using this field. SEE ALSO: Understanding Job Classifications vs. Employee Template IDs
Comments	(Optional) Enter any general comments about this employee. NOTE: This column is sortable on the entry screen. Entering asterisks or other symbols can assist with sorting like items together on the first security screen.
Restrict auto-security for this employee	If selected, the option to activate Auto-Security on the CU*BASE home page will not be available for this employee.
Branches to exclude	(Optional) Use the Select button to display a window where you can select one or more branch IDs, to prevent this employee from working with members attached to those branches. Enter up to 20 Branch IDs here; this employee will not be able to work with member accounts attached to these branches. This feature is designed for credit unions which “attach” a branch ID to every credit union member, and need to control employee access to member accounts based on the branch to which the member belongs. If your credit union does not use this method of member branch security, these fields should be left blank.
Corp. IDs to exclude	(Optional) Use the Select button to display a window where you can select one or more corporate IDs to prevent an employee from working with members attached to specific corporation numbers.
Start date	Enter the employee's start date.
NMLSR #	Record the NMLSR# for an employee. NOTE: NMLSR# won’t appear on forms until you make a change to your form and we re-program it.
Email address	Enter an email address to be used with Accounts Payable Invoice notifications. Learn more about this feature. This will be the To: email address.