Admin & Security
Capability-based roles, dual-control (maker-checker), the audit log, and device trust.
Understanding capability-based roles
How roles are built from granular capabilities rather than fixed job titles.
Creating a custom role
Combining capabilities and branch scope.
What is dual-control (maker-checker)?
Why certain actions require a second person's sign-off, and which actions trigger it.
Reading the audit log
What's captured, retention, and how to search it.
Approving a new device for a field agent
The enrolment approval step — see Mobile App for the field-side flow.
Revoking a staff member's access
The offboarding checklist.
Related categories
Login, worklist, offline cash collection, receipts, EOD reconciliation, and device trust.
Tenant provisioning, the app switchboard, and billing plans.
Sanctions/PEP screening, alert resolution, and Suspicious Transaction Report (STR) filing.
Frequently asked questions
What is a capability-based role?
A role built from individually assignable capabilities (e.g. "approve loans under X amount") rather than a fixed job title.
What is maker-checker (dual-control)?
A rule requiring a second authorized person to approve a sensitive action before it takes effect.
What does the audit log capture?
Who did what, when, on which record, across the platform.
How do I revoke access for a departing staff member?
Deactivate their account and branch scope immediately; the audit log preserves their prior activity.