Close

 

File Upload permission requirements for FLA payment files: Frequently Asked Questions

1. What’s changing on 19 October 2020?

All users who approve files will require ‘Authorise’ permissions (also known as entitlements) for the accounts and payment sets (for countries that support ACH with payment sets) that are included in files.

Note: Cheque Outsourcing and SEPA Direct Debit permissions will be available on your HSBCnet profiles beginning 1 October.

2. How can I review my users’ permissions?

You can download the ‘Full List of User Entitlements by Account’ report from the Administration Reports service on HSBCnet.

3. Which are some examples of account level permissions for the different instruction types?

Some common examples are outlined in the following table:

Type of instructions in the file	Required account level permissions
ACH payments	ACH Debit / ACH Credit
Cheque Outsourcing (COS)	Cheque Outsourcing North America
Customer Transfer	Customer Transfers
Positive Pay	Message Centre - Check Issue Services Account Authority Details
Priority Payment / Wire Transfers	Priority Payments / Wires
Inter-account Transfer	Transfers
SEPA DD	SEPA Direct Debit

4. What if a service/payment type is not available/visible for permissions in Account Services?

If you don’t see a service/payment type in Account Services, you’ll need to contact your local HSBCnet Support Centre and/or your HSBC representative to have it added to your profile.

Until the service/payment type is added, files that reference it will not be available for authorisation due to the missing permissions.

Note: Cheque Outsourcing and SEPA Direct Debit permissions will be available on your HSBCnet profiles beginning 1 October.

5. What if an account is not available/visible for permissions in Account Services for the specific payment type?

If you don’t see an account listed in Account Services, you’ll need to contact your local HSBCnet Support Centre and/or your HSBC representative to have the account added to your profile.

Until the account is added, payment files that reference the account will not be available for authorisation due to the missing permissions.

6. My country uses payment set codes. What if an ACH payment set code is not available for permissions?

If you don’t see an ACH payment set code listed in Account Services, you’ll need to contact your local HSBCnet Support Centre and/or HSBC representative to have the set code added to your profile.

Until the ACH payment set code is added, payment files referencing this set code will not be available for authorisation due to the missing permissions.

7. Does this change also affect accounts in countries where identity verification requirements are in place?

Yes. For countries that have regulatory identity verification requirements, transaction authorisation permissions can only be given to users who have had their identity verified by the bank.

8. Does this change affect our daily transaction limits?

Additional daily transaction limits are not required at account level. The existing File level and daily transaction limits will continue to apply in the File Upload permissions screen.

9. My organisation doesn’t use FLA files and I want to make sure users are not able to approve these files via File Upload. How can I remove this access?

If your organisation doesn’t need to upload FLA files via File Upload, we encourage you to remove users’ access to the service in HSBCnet to minimise any associated security risks. System Administrators can do this by removing individuals’ Upload authority and File Level Authorisation File Upload permissions via the User Management service (as shown in the image below).

For enhanced protection, make sure that you remove the permissions (de-select checkboxes) for all users under your organisation’s profile.



(select image to enlarge)

10. Why is HSBCnet requiring users to have authorisation permissions for approving FLA files?

This requirement is part of our ongoing effort to help you maintain effective controls within your organisation, as well as protect against unauthorised payment processing. By enforcing these permissions, we help you make sure that only those users you want to process FLA files are able to do so.

11. My file is causing an error during authorisation due to missing permissions. How do I know which permissions are missing?

To identify which permission(s) are missing, you’ll need to know which of your accounts and service types are referenced in the file by contacting its creator or uploader. Then, a System Administrator will need to review your account level ‘Authorise’ permissions.

12. Why am I not able to view the FLA files details under File Status monitoring summary?

Users who do not have account level ‘Enquire’ permissions to the accounts referenced in the payment files, will not be able to see payment details such as Beneficiary name, Beneficiary account, Currency and Amount.



(select image to enlarge)

 

Back to top | Close