Managing Users and Permissions
- Updated on 04 Jan 2019
- 4 minutes to read
Different user groups (roles) profiles can be created to easily manage and assign permissions to Mambu users according to their position/role in the organisation.
By managing permissions each user will only have access to the information that is relevant for their required activities in Mambu.
For example, a Credit Officer might be able to create a new loan account (application) for a client, but only the Branch Manager would have the permissions to approve or reject the loan application. Other users might only be allowed to view reports, but not post any data in the system.
In such cases, options like managing clients, accounts and administration tasks won't be visible, or the access to these actions will be denied to those users who do not have permission to perform them.
An user role stores a set of permissions and access rights for users, those permissions are applied to any users that belong to the role.
Whenever the role is updated, any users assigned to it will have their permissions updated as well.
The permissions for any user which is assigned to a role cannot be modified directly from the user edit screen, that can only be done unless the user has no role assigned.
An user that is not an administrator can be granted certain administrator rights to manage branches, centres, notifications and reports without being a full-featured super administrator. You can add such permissions under the Permissions section.
To create User Roles as Administrator:
- Go to Administration > Users.
- Select the Roles tab.
- Click on Add Role.
- Select the Role Name, User Rights, and Permissions.
- Save the Changes.
There are certain actions that an user can perform in Mambu that do not have a specific permission in place for them, they depend upon other permissions or types of user.
- Only Administrator users can Create Views which are available for other users.
- Only the user who created a task can edit it.
- For Transfer transactions , users need to also have Repayment or Deposit permission (depending if the transfer has as a target a repayment in a loan account or a deposit on a savings account).
- For Rescheduling , users also need the “Create Loan” permission.
- To Revert a certain type of transaction , besides the "Apply Loan/Deposit product adjustments", the user requires the permission to post that type of transaction i.e. to revert a repayment, the user must have the "Enter repayment" permission as well.
- To Change the Loan's Account Branch a new "Manage Loan Association" permission was added, which will be by default disabled. Without this permission the Branch box from Create Loan Account form and Edit Loan Account form will be in read-only and the branch change will not be allowed.
Users who will no longer access Mambu (for instance, when they leave the organization) can be deactivated, so that they are not able to login to Mambu. This will also ensure that no clients, branches or tasks can be assigned to them anymore.
To deactivate a user:
- Click on Actions > Deactivate
- Confirm the deactivation
If the user is a credit officer with any groups or clients associated, Mambu will give you a warning message and prevent the deactivation. In this case, you need to reassign the user's clients and groups to another user before deactivating the user.
You can read how to reassign several clients and groups to another user at Assigning Clients to Credit Officers & Branches.
To Reactivate a User:
Click Actions -> Activate and the user will be able to access Mambu again.
Users can only be deleted if they have no clients, groups or transactions associated to them, if deletion is not possible because of this, deactivating the user instead is recommended.
To delete a user:
- Go to Administration
- Click Users and Permissions > More Actions (next to the user you want to delete)
Mambu Support Access
This permission is required to allow Mambu's support team to be able to log into an account to help with any support case.
To enable/disable Mambu Support Access:
- Go to Administration.
- Click Users and Permissions.
- Select Users tab.
- Click on Mambu Support Access at the bottom of the page (green if enabled, gray if disabled).