Skip to main content

Creation of Authorized Users now requires the user to step-up their token

· One min read

Effective:

  • 27 February 2024 on Sandbox
  • 20 March 2024 on Live

The creation of an Authorized UserAuthorized UserAn individual that has been invited by the root user to manage a customer's instruments and transactions. They are not the legal owner of the customer but can be granted access to perform operations on its behalf. For corporates, card assignees are created as Authorized Users. US-English variant of _Authorised User_. for a BuyerBuyerA business entity in the Payment Run solution that can be provided with financial services to perform embedded payment runs. Buyers are onboarded through a KYB process and can create payment runs to pay their suppliers. They have roles such as Admin, Controller, and Creator. is a key moment in the integrity of the security for that BuyerBuyerA business entity in the Payment Run solution that can be provided with financial services to perform embedded payment runs. Buyers are onboarded through a KYB process and can create payment runs to pay their suppliers. They have roles such as Admin, Controller, and Creator.. To mitigate against security risks, we are now requiring the user who is creating a new authorized userAuthorized UserAn individual that has been invited by the root user to manage a customer's instruments and transactions. They are not the legal owner of the customer but can be granted access to perform operations on its behalf. For corporates, card assignees are created as Authorized Users. US-English variant of _Authorised User_. to step-up their token. Creating Authorized UsersAuthorized UserAn individual that has been invited by the root user to manage a customer's instruments and transactions. They are not the legal owner of the customer but can be granted access to perform operations on its behalf. For corporates, card assignees are created as Authorized Users. US-English variant of _Authorised User_. continues to be an operation that can be performed by a user that has the Admin role.

Affected API endpoints:

More details on how to step-up a token are available in our documentation.