by Jill Feiler on May 1, 2023 9:15:57 AM
FI Read-Only Access for SSO Users
FIs with SSO users must have a read-only permission level available to them.
FI manages the user groups and relays that to ZSuite.
The FI Read-only user will have access to only view the dashboard and subaccount information in the platform including transaction level information, however they will not be able to create new accounts, modify or transfer funds or close subaccounts.
IT Instructions for how to setup
- Allow ad groups to pass through with user's SAML token.
- Create two groups (ZEscrow_Admin, ZEscrow_ReadOnly)
- Add users to appropriate groups (per note above, we suggest adding an existing FI user to the new Read Only group for testing)
- ZSuite to verify groups are visible in the production environment.
Useful setup link for Azure SSO- https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-group-claims#add-group-claims-to-tokens-for-saml-applications-using-sso-configuration
Other Features
This release also includes some additional features like allowing org level users to be able to view the account documents like W9 on their subaccounts.
Update to the value APY shown on the subaccount dashboard and Activity report
This was essentially fixing the value shown under APY to be the correct percentage yield and not the interest rate which is referred to as APR
APR = Interest Rate
APY = Yield
APY Calculation: ((1+r/n)^n) - 1 where r = APR(Interest Rate) and n = number of compounding periods(annual). Note: divide APR by 100 to use in this equation, so 4.2% should be 0.042 in this equation.
Example APR(r) = 4.9% = 0.049,n = 12,
APY = ((1+r/n)^n) - 1 = (1+0.049/12))^12 - 1 = 0.0501 - 5.01%
