Skip to main content

Users, User Groups, and Entitlements Guide

Learn how to manage user access, permissions, and entitlements within the platform

Written by David Taylor

Overview

Citizens Treasury Intelligence™, Powered by Trovata, has three types of users. A user's type decides who can update them: your admins directly in the platform or your AcessOptima Admin.

If the AcessOptima Admin created the user, they manage that user. If your admins created the user in the platform, your admins manage them, even if Citizens later adds them to its records.


User Roles & Management

User Role

User Abilities

Admin

  • This role has the highest permissions level as it allows the user to engage with all functions in the platform and grants access to the admin portal.

User

  • This is the default role which allows the user to engage with all functions in the platform, but does not grant access to the admin portal.

Reader

  • This role is read only and can be used to allow individuals specific visibility to whitelisted resources. Whitelisted resources include but are not limited to Accounts, Tags, Reports, and Forecasts. By default, readers will have access to all of these resources and Admins can later specify, if needed, which of these resources should be accessible.


Adding Users

  1. Click on the name of your business in the bottom left corner, then click Settings.

  2. Click the Users tab, then click New User

  3. In this menu, enter in the corresponding user information (First Name, Last Name, Email, Phone Number), then click select a User Group(s).

    Note: Users can be part of multiple groups. If a user is part of more than one user groups, it can only ADD access and cannot remove access to anything you are entitled to in another group.

  4. Click done.

  5. The new user will be sent an email notification that includes a link prompting them to confirm their account and to set a password.

Note: The link generated in the email expires after 72 hours, so please ensure that the new user is ready and able to finish the user set up process prior to adding them in the Admin Portal.


Deleting Users

  1. Click on the name of your business in the bottom left corner, then click Settings.

  2. Click the Users tab.

  3. Click the 3 dots to the right of the user you'd like to delete from your account, then click Delete User.

  4. Confirm the users deletion by pressing Delete again, and they will be removed from the account.

Note: Only Standalone and Hybrid users can be deleted inside of the platform. Paired users can only be deleted by AccessOptima Admins.


User Types

User Type

User Creation

User Management

Standalone

Created by an Admin within the platform (Citizens Treasury Intelligence)

  • Your admins

Paired

Created by AccessOptima Admins

  • AccessOptima Admins, for identity and Citizens account access.

  • Your admins manage user group membership

Hybrid

Created by an Admin within the platform (Citizens Treasury Intelligence), then an AccessOptima Admin added them later

  • Your admins. Hybrid users work exactly like Standalone users

Note: Paired users also have locked identity fields, so you can't edit their name, email, or phone number. Also, only users with the "View Users" permission can see pairing status.


Change Permissions

Change

Standalone or Hybrid Users

Paired Users

Name, email, or phone number

Your admins

Citizens (AccessOptima Administrators)

Delete the user

Your admins

Citizens (AccessOptima Administrators)

Access to Citizens bank accounts

Your admins

Citizens (AccessOptima Administrators)

"View users" or "Manage users" permission

Your admins

Citizens (AccessOptima Administrators)

Admin or regular user role

Your admins

Citizens (AccessOptima Administrators)

User group membership

Your admins

Your admins

Access to accounts at other banks

Your admins, through user groups

Your admins, through user groups

Features such as reports and forecasting

Your admins, through user groups

Your admins, through user groups

Note: For Paired users, AccessOptima Admins also manage whether the user is active and whether they see prior-day or current-day data on Citizens accounts.

Note: To request a change for a Paired user, contact your AccessOptima Admin. Changes made by AccessOptima Admins typically appear in Citizens Treasury Intelligence by the next business day.


Paired User / User Groups

User groups are how your admins manage Paired users.

  • Adding a Paired user to a group controls which features they can use and which accounts from other banks they can see.

  • User groups never give a Paired user access to a Citizens account, even if the group includes that account.

  • User groups also never override a permission an AccessOptima Admins has granted or denied. Citizens account access and users permission always come from AccessOptima Admins.


Feature Bundle User Groups

When your company purchases or upgrades a bundle, the platform automatically creates user group(s) for that tier. These groups start empty, and your admins can add users to them.

Bundle

User Groups Created

Bank Pro

Bank Pro User Group

Finance

Finance User Group

Finance Pro

Finance Pro User Group and Finance User Group

Treasury

Treasury User Group, Finance Pro User Group, and Finance User Group

A few things to know about bundle user groups:

  • They are permanent. Bundle user groups can't be deleted or renamed. If your bundle changes, existing bundle groups stay in place, and their members see only the features your current bundle includes.

  • They don't include account access. To give a user account access, add accounts to their group or add them to a group that already includes accounts.

  • Upgrades don't move users. After an upgrade, users stay in their current groups. An admin needs to add them to the new bundle group.


Cloning User Groups

Cloning copies a group's permissions as they exist today. If you clone the Treasury User Group while on the Finance bundle, the clone includes only Finance features. The clone is a standard group you can edit, and it isn't tied to your bundle, so future upgrades add features to the original bundle group and not the clone.


Troubleshooting

Situation

Standalone or Hybrid Users

Paired Users

A user's name, email, or phone number is wrong

An admin can update it

Ask a AccessOptima Admin to correct it

A user can't see a Citizens account

An admin can grant access

Ask a AccessOptima Admin to entitle the account to the user, and confirm whether they need prior-day data, current-day data, or both

A user needs an account from another bank

Add the account to one of the user's groups

Add the account to one of the user's groups

A user needs a feature, such as forecasting

Add the user to the right group, usually a bundle user group

Add the user to the right group, usually a bundle user group

A user can't see or manage the Users page

An admin can grant the permission

Ask a AccessOptima Admin to grant the permission

A user should be an admin

An admin can change the role

Ask a AccessOptima Admin to change the role

A user can't log in

Contact support

Contact a AccessOptima Admin to confirm the user's access is active

A person has left your company but still appears

An admin can delete the user

Ask a AccessOptima Admin to remove the user


FAQs

  • Q: I added a Citizens account to a user group, but a Paired user still can't see it. Why?
    A: Paired users receive Citizens accounts only from changes made by a AccessOptima Admin. Ask a AccessOptima Admin to entitle the account to the user.

  • Q: Why does my cloned group have fewer permissions than the original?
    A: A clone copies only the features your company can access when you clone it.

  • Q: If we upgrade, do our Paired users become admin-managed?
    A: No. Paired users remain managed by AccessOptima Admins after an upgrade.

Need help?

For questions about Paired users or Citizens account access, contact your Citizens service team. For anything else, reach out to Citizens Treasury Intelligence support through the chat icon in the platform.


Did this answer your question?