Managing Access to PAN Finder

For using the PAN Finder feature, a user needs to have been assigned the Sensitive Information Manager role. A user can be assigned the Sensitive Information Manager role provided that they have met the eligibility requirements.

For a user that no longer requires access to PAN Finder, you can remove the Sensitive Information Manager role for them. Removing access allows the user to continue to use Thredd Portal for any other role that they may have been assigned to.

Steps for Setting Up PAN Finder

Setting up PAN Finder involves the following steps. For assigning the Sensitive Information Manager role, the option that you choose depends on whether or not your organisation has migrated to the IAM platform.

  1. You raise a ticket with Thredd's Customer Support team through the following link: https://thredd.atlassian.net/jira/servicedesk/projects/CSTHREDD/.

  2. Thredd checks that the user is PCI DSS-compliant in order for them to be eligible for the Sensitive Information Manager role.

  3. Thredd notifies you that the user is eligible for the Sensitive Information Manager role through the raised ticket. You will also be notified if the request has been declined.

  4. Thredd or the Admin User assigns the Sensitive Information Manager role to each eligible user.

    • If the organisation has migrated to IAM, an Admin User can assign the role to the users through Thredd Portal. For more details, see the following procedure on Adding the Sensitive Information Manager role.

    • If the organisation has not migrated to IAM, Thredd assigns the Sensitive Information Manager role to the users on the Admin User's behalf. When assigned, the PAN Finder user can start operating PAN Finder (see Using PAN Finder).

If your organisation intends to start migrating to IAM, contact your Thredd Account Manager.

For details on migrating to IAM, refer to the Thredd Identify and Access Management Migration Guide.

Adding the Sensitive Information Manager Role

You can add the Sensitive Information Manager role to a new or an existing eligible user in Thredd Portal.

Adding the Role to a New User

You can add the Sensitive Information Manager role when you create the new user for the organisation in Thredd Portal. When you have added the role, you then need to activate the user.

  1. Sign in to Thredd Portal.

  2. Go to System Admin > Organisation > User Management. The User Management page displays.

  3. Click Add New Users The Add New Users page displays.

  4. Enter basic details of the user:

    1. Enter the user's first name in the First Name field.

    2. Type in the user's last name in the Last Name field.

    3. Enter the user's email address in the Email field.

    Filling in data to all three fields are mandatory.

  1. Under Admin Roles, select Sensitive Information Manager as shown in the following example:

  2. If required, choose any of the other roles under Admin Roles, Developer Roles, Card & Transactions Roles and Read-Only Roles.
  3. Click Save and Continue.

  4. In the Review and Finish page, check the entered details of the new user, including their assigned role of the Sensitive Information Manager.

  5. Click Submit. A message appears indicating that the user has been created.
  6.  Activate the user:
    1. Find the newly-added user in the User Management page.
    2. Click the options menu icon in the Actions column.
    3. Select the Activate option.

When activated, the user receives an email. A notification appears confirming that the user has been activated.

The user needs to accept the activation of the user account from the received email. If they did not receive the email, click the options menu icon in the Actions column and select the Resend Email option.

Adding the Role to an Existing User

You can add the Sensitive Information Manager role to a user that has already been added with a different Thredd Portal role. For example, they already have been assigned the Manager and the Internal roles.

  1. Ensure that you are on the User Management page.

  2. Find a user that you want to update, such as in the following example.

  3. Click the options menu icon in the Actions column.

  4. Select Edit User from the options menu.

  5. In the Edit User page, select Sensitive Information Manager under the Admin Roles section.

  6. Click Save and Continue.

  7. Review the updated details which may appear similar to the following.

  8. To confirm the change, click Submit.

Removing PAN Finder Access for a User

From the Edit User page, you can remove the Sensitive Information Manager role if required.

  1. For an existing user, clear the Sensitive Information Manager check box in the Admin Roles section of the Edit User page.
  2. Click Save and continue.
  3. Review the details on the page.
  4. To confirm the change, click Submit.