Implementation > EBICS > EBICS Server > EBICS security services via PassPort > Creating Business users for EBICS in PassPort

Creating Business users for EBICS in PassPort

About

If you use PassPort AM to manage EBICS users, you need to create Business users.

You use the AM (Access Management) service of PassPort to create users.

This topic provides guidance for the creation of Business users for EBICS. For more information, refer to the Axway PassPort documentation.

EBICS Business users

In order to connect to the EBICS Server, EBICS users created in PassPort require a role. Optionally they can also belong to a group.

Privileges

A privilege is a combination of a resource and one or many actions related to this resource. It creates an object usable for roles to define a right. This object can have conditions.

By default, a list of privileges is delivered with the CSD (Component Security Descriptor) file.

Roles

A role is a set of privileges. The role gives permissions to a user. A role can be assigned to a user or a group.

Groups

A group is a set of users. A group may have one or more roles.

In the EBICS implementation, groups are only used for bank restrictions. However they can also be used for other purposes.

Restricting privileges to specific banks

You can restrict access to a bank based on its name. This is done through privileges that mange the resource BANK. In these privileges, you can add conditions on the bank name. In this way, you can restrict access to a bank based on its name.

In the privilege definition, in the condition window, specify this restriction by adding a condition on the property called bank name. This can be achieve by either:

You can:

Set a condition based on a constant value of a bank. For example, bank name is constant BNK1.
Set a condition to a group property. For example, bank name is property bank. The bank group property is delivered as a sample in Bank 1 Group and Bank 2 Group.

Users

A user in PassPort AM belongs to a domain. By default there is only one domain: Synchrony. In order to use these users, they must have at least one role. In addition they can belong to one or more groups.

According to the password policy the user’s password can be one of:

Equal to the userId
A default password
A generated password sent to the user by mail

Creating a Business user

Create a privilege.
Create a role.
Create a group.
Create a user.

For more information, refer to the Axway PassPort documentation.