24th March 2006

User roles and linked card usersCard User The person that a card is assigned to and who will use the card for purchases. Weavr does not support anonymous cards, and therefore all cards must be linked to a card user before a card can be used. For consumers, the card owner and the card user is typically the same person. For corporates, the card users are employees or individuals authorised to spend the corporate's funds.

User roles

Users within a corporate identity often interact with your service for a specific, everyday purpose — such as making purchases on an assigned card, or initiating payments. Beyond these end users, corporatesCorporates Business entities that can be onboarded as identities on Weavr. Corporate identities represent companies and require Know Your Business (KYB) verification. They can have multiple authorised users and issue cards to card assignees. also typically have users who perform support and administrative functions, such as overseeing financial instruments, controlling fund flows across the organisation, or managing users.

Weavr recommends following the principle of least privilege: each user should only be able to access and operate on the financial instruments and data that are relevant to their specific function.

To support this, Weavr has introduced a set of pre-configured roles that can be assigned to users to achieve the appropriate access level for their function.

This optional feature can be adopted at your own choice. If not utilised, users will continue to enjoy all of the rights and permissions that they do today.

For more information, see the authorised user roles documentation and the Users endpoints.

Linked card usersCard User The person that a card is assigned to and who will use the card for purchases. Weavr does not support anonymous cards, and therefore all cards must be linked to a card user before a card can be used. For consumers, the card owner and the card user is typically the same person. For corporates, the card users are employees or individuals authorised to spend the corporate's funds. (breaking change)

For embeddersEmbedder A company or developer that integrates Weavr's embedded finance services into their own application to provide financial services to their end customers. operating a programme where cards are issued to corporate identities, Weavr is introducing a mandatory process whereby managed cardsManaged Card A payment card (virtual or physical) that can be created and managed through the Weavr platform. Cards can operate in prepaid mode (with their own balance) or debit mode (linked to a managed account). All cards must be assigned to a card assignee who is an Authorised User. must be linked to users. This is to ensure:

• Every active card is linked to a valid card userCard User The person that a card is assigned to and who will use the card for purchases. Weavr does not support anonymous cards, and therefore all cards must be linked to a card user before a card can be used. For consumers, the card owner and the card user is typically the same person. For corporates, the card users are employees or individuals authorised to spend the corporate's funds. with complete mandatory data
• Card usersCard User The person that a card is assigned to and who will use the card for purchases. Weavr does not support anonymous cards, and therefore all cards must be linked to a card user before a card can be used. For consumers, the card owner and the card user is typically the same person. For corporates, the card users are employees or individuals authorised to spend the corporate's funds. have valid credentials and are enrolled for 3DS3DS 3-D Secure - an additional security layer for online credit and debit card transactions. It adds an authentication step where the cardholder verifies their identity with the card issuer during the purchase, reducing fraud and providing liability protection for merchants.
• Cards cannot be used until all mandatory data for the linked card userCard User The person that a card is assigned to and who will use the card for purchases. Weavr does not support anonymous cards, and therefore all cards must be linked to a card user before a card can be used. For consumers, the card owner and the card user is typically the same person. For corporates, the card users are employees or individuals authorised to spend the corporate's funds. is provided

The change supports compliance requirements for sanctions screening and channel enrolment, and establishes a consistent approach across all card schemes.

The linking of cards to users should be done via the existing userId field when creating or updating a card.

For more information, see the virtual cards documentation and the Managed Cards endpoints.

To enable this feature on your sandbox account please contact Weavr support.