Creating Mambu UI Users
- Updated on 29 Oct 2019
- 7 minutes to read
Create new users
A Mambu user is the profile that allows accessing and working in Mambu, it stores the access credentials and details of the person using the system, as well as the role and permissions. Activities and transactions performed by a Mambu user are linked to it for audit purposes.
Only people with a user profile can login and use Mambu.
To create a User:
- On the Navigation Bar
- Click on Create button > User.
- Select the Role Name, User Rights, and Permissions.
- Save the Changes.
Details about how the different options in the Create User form are described in the sections below.
Constraints for creating a new User as Non-Admin:
- "User" option on Create button is visible only if the user has permission to Create Users
- "Edit" button on the user overview is visible only if the user has permission to Edit Users
- Adding fields for users from "Add Field" is available only if the user has permission to Edit Users.
- Additional constraints for non-admin users:
- can select only non-admin roles
- can edit only users that are assigned to the branches the user can manage
There are three options for user types: Administrators, Credit Officers, and Tellers. A user that has one of those types has special characteristics that will be described below. However, users can be created without being any of these user types, that means they can access Mambu without having administrator rights, being a credit officer or having access to the teller module.
Administrators are users with all permissions, and can perform any action in Mambu. Only Administrator users can create or edit other Administrator users.
An user that is not an administrator can be granted certain administrator rights without being a full-featured administrator user. You can add such permissions under the Permissions section. Please see the Managing Users and Permissions article for more details.
Credit Officers have the option of having clients and groups assigned to them, this relationship allows for better reporting and client management.
Tellers have access to the teller module, special tellering permissions give them access to the different actions available on this module, such as opening/closing tills, posting transactions on a till, adding and removing cash from a till etc.
Access rights determine at a high level how the user can interact with Mambu. There are two different access rights - Mambu (for regular users) and API (for external integrations and applications)
Mambu access allows the user to log in to Mambu via the regular web user interface, using their login credentials. If an user does not have this access right, login to Mambu via the web user interface will not be possible.
API access allows the user to authenticate and interact with Mambu using Mambu's APIs, this means that most of the time such an user is not an actual person, but a piece of software that is programmed to interact with Mambu. The API user would still require the right user permissions, depending on what it is required to do in the system, and transactions posted by that user are kept in the logs in the same way as user actions from regular users.
For more information on Mambu's APIs and creating API users, please see the relevant developer guide article API & Apps Authentication
In most cases user permissions will be applied with a User Role, which can be assigned to the user to automatically apply the User Role permissions. If needed, individual permissions can be manually set for an individual user. To do so click on permissions > check the boxes next to the permissions that apply or click > Save Changes.
For more information about User Roles and Permissions please see our related article: Managing Users and Permissions
Username and password
This is the information the new user will need to login to Mambu. Usernames are short identifiers that can be an abbreviation of the user's name, for instance.
Mambu will give you a warning message in case the username you're creating already exists in the system so that every username remains unique.
To define the access details for the new user type the username > create a password > retype the password to confirm it.
For additional security, two-factor authentication can be added for users.
When this setting is enabled, users will be sent an SMS on their registered mobile number, which they will need to enter in the Mambu login screen in addition to their password.
An SMS gateway needs to be defined to be able to use Two-Factor authentication, for more information please see our article Set up SMS Notifications
This is the language the user will see for the menus and options while navigating in Mambu. To choose the display language click the dropdown list > choose one of the options.
- You can set different languages for different users according to their preferences.
- The language can be chosen when creating a new user or can be changed later on.
Assigning to a Branch and Branch Access
Users can be associated to a specific branch, allowing access to that branch and its clients and information.
Branch: Defines the branch to which the user belongs, if applicable. To assign the user to a branch, choose the branch from the list.
Can access other credit officers' clients": (only for credit officers)
This option gives the new user access to all clients and accounts assigned to:
- the other credit officers in their assigned branch, as well as
- credit officers who are not assigned to any branch.
Can access all branches: This option allows the user to access the clients and accounts assigned to every branch in the system.
Branch access: If access to all branches is not granted, access to individual branches can be given by selecting them here. If the user is assigned to a branch, the assigned branch will appear pre-selected.
In this section you can specify the email, mobile number, and home phone of the user.
- An email is required for using the "Forgot your password?" link in the login screen, as the password recovery email will be sent to this address.
- A Mobile number is required for using Two-Factor Authentication.
If you need to capture additional information about the users, you can create Custom Fields under Administration and add them to the users' profiles when creating a new user. To see how to create and manage custom fields, please read the article Custom Fields.
By having custom fields associated to users, you will also be able to generate Jasper reports correlating users to any variable which might be relevant for your operations.
For any user who doesn't have Administrator permissions, you can set maximum amounts of transactions they would then be allowed to operate.
There are six different types of transactions that can have a limit - Loan Approval, Loan Disbursement, Fee Application, Entry of Deposits, Withdrawals and Repayments.
To set a limit on transactions a user can deal with, click on Add Limit > choose the transaction from the dropdown menu > enter the limit amount for that transaction > add more transaction limits or proceed.