TEMENOS

Transact Security Management System Learning Communiby'

Override Class » Simple Blocked Override Setup

The override record has been modified to include the user class details
thus making it a blocked override. Use of the fields APPLICATION and CLASS
in the OVERRIDE application. APPLICATION : denotes the application from
which this override is generated. means the Override may be generated from
any application e.g. FT, LD. CLASS: This field specifies a group name.
Users belonging to this group alone will be able to authorize record with
this override. Class name can be any descriptive text. Maximum of four
characters only. In the above example, if the Override is generated in the
FUNDS.TRANSFER application, then only users with Class TEM in their User
profile can accept it. The OVERRIDE.CLASS field of USER profile or
EB.USER.ROLES (if Roles are set) relates to the CLASS in the OVERRIDE
application In the above example, the user AUTHUSER and any user belonging
to the ACCOUNT.OFFICER role can now authorise the record which generated
the ACCT.UNAUTH.OD override.

I Override Class » Simple Blocked

Override Setup
02022 Temenos Headquarters SA - all rights reserved 121
 TEMENOS
Transact Security Management System Learning Community

Override Class » Blocked » Authorisation Process

1: OVERRIDE.ACCT.UNAUTH.OD defines : - For a FT, use classname2 -
Definition of the msg format 2: For this FUNDS.TRANSFER
initiated by an inputter, here is the
«msg filled», waiting for classname2 to
authorize. Record status is INAU. 3: If the USER is not
classname2 and tryes to authorize, he will not manage and
Record status is INAO. The authorizer USER authuser is of classname2 (or of
authrole). He can authorize.
4: After authorisation, FUNDS.TRANSFER Authorizer??? and msg override are set
to the authuser. Record status is LIVE, funds are transfered.

I Override Class» Blocked » Authorisation

Process
FUNDS.TRANSFER number>
msg «msg filled»*classname2 *authus
override. er]
I msg IHLD,
override.2 INAU, IMO, LIVE
Authorizer
record
status
OVERRIDE ACCT.UNAUTH.OD
class 2
classnamel classname2

msgl «msg format» msg2 «msg format»

02022 Temenos Headquarters SA - all rights reserved 122

 TEMENOS
Transact Security Management System Learning Community

Override Class » Illustration » Without Override Class

OVERRIDE.CLASS for the USER RELMGR is blank. Now login as RELMGR and
input an FT transaction, accept the overrides and commit the record. View
the FT record and notice the field Override.l being suffixed with 'TEM
which implies that only a user belonging to the class TEM can authorize
the record. (This is because when the OVERRIDE is raised from FT, User
with TEM can approve the Override)

I Override Class» Illustration » Without

Override Class

02022 Temenos Headquarters SA - all rights reserved 123

 TEMENOS
Transact Security Management System Learning Communiby'

Override Class »

Illustration » Without Override Class

Note that the user FO.EXEC is not attached to the class TEM. Now login as
FRONT OFFICE EXECUTIVE and authorize the record. You will see the message
'YOU CANNOT APPROVE ALL OVERRIDES'. This is because, User record for
FO.EXEC does not have TEM in OVERRIDE.CLASS You can see the record status
is INAO. Only when a user with he field Override class set to 'TEM' in
the user profile authorizes the record, the RECORD.STATUS becomes LIVE.

I Override Class » Illustration »

Without Override Class
USER does
not belong
to any class

02022 Temenos Headquarters SA - all rights reserved 124

 TEMENOS
Transact Security Management System Learning Community

Override Class » Illustration » With Override Class

Note that the user AUTHUSER is attached to the class TEM and TAG. Now
login as AUTHUSER and authorize the same FT record. Open the record in
SEE mode and check for the field Override. 1 being suffixed with
TEM is the Class name. AUTHUSER is the user who has
approved the override. Note that the field Authorizer still holds the
user FO.EXEC and does not change to AUTHUSER

I Override Class » Illustration » With

Override Class

USER belongs to class TEM

and TRG

TEMENOS

02022 Temenos Headquarters SA - all rights reserved 125

 TEMENOS
Transact Security Management System Learning Communiby'

Override Class »
Illustration » With Override Class
If an user of the class TEM inputs the FT transaction, Can any user
authorize the FT record? Note that user FO.EXEC is not attached to the
class TEM. Now can this user authorize the record? YES. Since the FT record
was input by the user belonging to the class TEM, now any other user who
does not belong to the class TEM can authorize the record

I Override Class» Illustration » With

Override Class
FUNDS TRANSFER

keg pso TEM class user (AUTHUSER)

stmt Noso VAL creates
BAL
•t E'.t•i

• 2-
Anyuser (FO.EXEC) can
authorize t
•TEM•

02022 Temenos Headquarters SA - all rights reserved 126

 TEMENOS
Transact Security Management System Learning Communiby'

Override Class »
Complex Blocked Override
There may be situations in a Bank when simple Class restrictions may not
be sufficient. Transaction can be authorized by different USERS based on
the values in the transaction. An Illustration will help you will learn
how to block overrides based on conditions

I Override Class» Complex

Blocked Override
• V'hat if simple Class restriction as we did
earlier is not enough?
• mat if the Class should have rights to
authorize and with approval limits of values in
the transaction?
• It is not enough to configure only the Class
field in the OVERRIDE Application?
• How can the above requirements be met?

02022 Temenos Headquarters SA - all rights reserved 127

 TEMENOS
Transact Security Management System Learning Communiby'

Override Class »

Class Mum-level

02022 Temenos Headquarters SA - all rights reserved 128

 TEMENOS
Transact Security Management System Learning Communiby'

Override Class »
Multiple Level Restrictions
Let is suppose that when an unauthorized overdraft override message is
generated in Transact, only the following users should be able to approve
the override based on the conditions define as below. Account Officer
classification Account officers can approve the override if the currency
is USD and the overdraft amount is in the range one to 10000 Manager
classification Managers can approve the override if the currency is USD
and the overdraft amount is in the range 10001 to 50000 GM classification
General manager can approve the override if the overdraft amount is in the
range 50001 to 100000. There is no check for CURRENCY for general managers

I Override Class» Multiple Level

Restrictions
• Scenario: When an unauthorized overdraft
override message is generated in Transact,
users should be able to approve the override
based on the following conditions.
Condtion I Condition 2
• Account Officers CURRENCY EQ OVERDRAFT AMOUNT RANCHO
USD

• Managers
2

CURRENCY EQ OVERDRAFT AMOUNT RANGEOOOI TO

Condtion I

OVERDRAFT AMOUNT RANGSOOOI TO 1000m

02022 Temenos Headquarters SA - all rights reserved 129

 TEMENOS
Transact Security Management System Learning Communiby'

Override Class »
GM

H SA - s

Multiple Level Restrictions

1: OVERRIDE.CLASS.DETAIL defines All details per classification
2: OVERRIDE.ACCT.UNAUTH.OD defines : - For a FT, use classname2
and Detail - Definition of the msg format 3: If the USER is not
classname2 or classification and tries to authorize, he will not
manage and Record status is INAO. The correct USER is of correct
classification. He can authorize. 4: For this FUNDS.TRANSFER
initiated by an inputter, here is the «msg filled», waiting for
classname2 or classification to authorize. Record status INAU
5: After authorisation, Record status is LIVE, funds are
transfered.

02022 Temenos Headquarters SA - all rights reserved 130

 TEMENOS
Transact Security Management System Learning Communiby'

Override Class »
I Override Class» Multiple Level
Restrictions

3
USER

Detail MANAGE .1
USE
R> MG
R
R

forma OVERRIDE.CLÆS.DETAL
t»
forma ACOF
Classificatio
t» MGR n
FUNDS.TRASFER mber>
«msg filled »•classname2, classification
msg
override. 1

02022 Temenos Headquarters SA - all rights reserved 131

 TEMENOS
Transact Security Management System Learning Communiby'

Override Class »
msg
override.2 IHLD, INAU, I
Authorizer
record
status
OVERRIDE .UNAJTH.OD

appli class classnamel classname2

2 mu level F
GB
T msgl «msg
GB msg2 «msg

H SA - s aved

OVERRIDE.CLASS.DETAILS
To set multiple level restrictions to approve an override you have to use
the application OVERRIDE.CLASS.DETAILS. You can set different groups who
can approve overrides only if the conditions specified in their groups are
satisfied. DATA.DEF : This field refers to the & values in the override
message. ACCT. UNAUTH.OD is the Override in which &1 refers to Currency,
&2 refers to Amount and &3 refers to Account. In this example, conditions
are specific to only Currency and Amount and hence only & 1 and &2 are
defined. A user defined routine can also be attached in the field
DATA.DEF. User can write his/her own conditions to be checked in the

02022 Temenos Headquarters SA - all rights reserved 132

 TEMENOS
Transact Security Management System Learning Communiby'

Override Class »
routine and depending on the result, various classifications can be set to
approve the override. The routine name should be prefixed with the sign @
in the field. The fields from Classification to Data.To form a multi value
set. The fields from Data.Def.No to Data.To form a sub value set.
CLASSIFICATION : This field holds any user defined text that best defines
the group classification. DATA. DEF .NO : This field indicates which data
item, as defined in the field DATA DEF is to be used for the
classification. The number in this field identifies which multi-value from
the field DATA DEF is to be referred. For example, the number '1 '
indicates that it is the data item defined by field DATA DEF.I
COMPARISON : specify appropriate operator DATA.TO : This field holds the
end value of a range. Attach the classification in the required USER
profile

02022 Temenos Headquarters SA - all rights reserved 133

 TEMENOS
Transact Security Management System Learning Communiby'

Override Class »
I Override Class»
OVERRIDE.CLASS.DETAILS

02022 Temenos Headquarters SA - all rights reserved 134

 TEMENOS
Transact Security Management System Learning Communiby'

Workflow

TEMENOS
Transact Security Management System Learning Community

Override Class » OVERRIDE.CLASS.DETAILS

When the override message is raised from the application FUNDS.TRANSFER,
the conditions specified in the record TRAINING in the
OVERRIDE.CLASS.DETAILS application will be checked and appropriately
validated. If the override message is raised for an amount which is
beyond the amount specified in OVERRIDE.CLASS.DETAILS then only the users
who belong to the class TRG can approve the override. When the override
message is generated for applications other than FUNDS.TRANSFER (denoted
using a *), users with the field Override Class set to TEM in their user
profiles will be able to approve the override.

I Override Class» OVERRIDE.CLASS.DETAILS

If Overdraft
amount does not
fall in the range
given in
OVERRIDE.CLASS.DET
AILS,
USER with TRG in
profile can
authorise
transaction

If Overdraft amount
falls within the range
given in
OVERRIDE.CLASS.DETAILS,
value will be evaluated
and appropriate USER
can authorise the
Transaction
TEMENOS

02022 Temenos Headquarters SA - all rights reserved 131

02022 Temenos Headquarters SA - all rights reserved 136

 TEMENOS
Transact Security Management System Learning Communiby'

Workflow
Let's see Funds transfer with override managed by any user or by a User
with appropriate Override Class.

I Workflow
• Login as any User
• Login as User with appropriate Override Class

02022 Temenos Headquarters SA - all rights reserved 137

 TEMENOS
Transact Security Management System Learning Communiby'

Workflow
» Approve with Override Class
Login to Transact as any user and input a FT debiting an account
with nil balance with USD 9000. Login as User with appropriate
permissions and authorise the FT.

I Workflow » Approve with

Override Class
• Login to Transact as any user and input a FT debiting an
account with nil balance

02022 Temenos Headquarters SA - all rights reserved 138

 TEMENOS
Transact Security Management System Learning Communiby'

Workflow
» Authorisation
Login as any user and input an FT debiting an account with nil balance
with USD 10400 Login as User with ACOF in OVERRIDE.CLASS and authorize the
FT Note that the record status is INAO as ACOF does not have the
privileges to authorize transactions with overdraft amount beyond USD
10000 Login as user with MGR in OVERRIDE.CLASS and authorize the record
The authorizer field will still show value of ACCTOFFI only the record was
initially authorized by the user ACCTOFFI

and input
and FT
with nil
balance
ACOF in and
authorize the
FT.
status is
INAO as the
privileges to
with
overdraft USD
10000. MGR in
and authorize
the
will still
show value o
record was
init ially
user ACCTOFF I
.

Workflow » Authorisation
Login as any user debit ing an account USD 10400.
Login as user with
OVERRIDE.CLASS
Note that the record ACOF does no have authorize
transactions amount beyond Login as user with
OVERRIDE.CLASS record.
The authorizer field ACCTOFFI only the authorized by the

02022 Temenos Headquarters SA - all rights reserved 139

 TEMENOS
Transact Security Management System Learning Communiby'

Workflow » Authorisation
Login as any user and input an FT debiting an account with nil balance with
USD 51000 If Account Officer, Manager authorizes the record, the record will
go to INAO status. Only a USER with GM in CLASS will be able to approve the
override and authorize the record.

I Workflow »
Authorisation
• Login as any user and
input an FT debiting an
account with nil
balance with USD 51000.
• Authorize the FT as
Account Officer or
Manager.
Record will be in INAO
status.
• Authorize the FT as USER
with GM in Co.-it/
CLASS.

02022 Temenos Headquarters SA - all rights reserved 135