Authorized signer versus online user
An authorized signer may have legal authority to transact on the account, while an online user may be granted narrower digital permissions. Banks use different terminology, so businesses should review both the account agreement and the online-banking role structure.
Use least-privilege access
A bookkeeper may need to view transactions and download statements without sending wires. An accounts-payable employee may need to create payments but not approve them. A controller may need approval authority. Matching permissions to job responsibilities reduces the damage a compromised credential or internal error can cause.
Dual control for sensitive payments
Many treasury platforms support dual approval or maker-checker workflows for ACH files, wires and user administration. Requiring one person to create a payment and another to approve it can be valuable for larger transfers or businesses with multiple finance staff.
Review access when roles change
Remove or change access promptly when an employee leaves, changes roles or no longer needs payment authority. Periodic user-access reviews are useful because permissions tend to accumulate over time.
Separate cards from account authority
Employee debit or credit cards can provide spending access without granting full account control. Compare card limits, merchant controls, alerts and the ability to lock individual cards separately from broader online-banking permissions.
Primary sources and reference material
- Bank account agreements and fee schedules vary by institution; verify current terms with the provider.
Model the account around the way your business actually moves money.
Fees, balances, transactions, cash deposits, payment tools and controls should be evaluated together. A lower headline fee is not automatically the lower-cost operating account.