Administrator guide

This manual is written for the people who keep the Assentify DXP healthy and configured for their organization. It covers three big areas: settings, audits, and Client Profile setup. Use it alongside the Assentify Platform Tour, the Assentify User Manual, and the Compliance Hub guide.

What it is. The way you and every user reach the tenant. Sign in uses a work email that ends in your tenant domain, then an optional two factor code.

1. Open the DXP URL provided by your administrator.
2. Enter your work email, then press Sign In.
3. Enter your password, then press Login.
4. If two factor authentication is on, enter the 6 digit code from your authenticator app.

Once signed in, the left side menu shows the full surface: Dashboard, Interactions, Clients, Documents, Flow Builder, Flow Manager, Compliance Hub, Communication, Developers, Logs, Settings. As an administrator you have access to all of them.

What it is. Settings on the side menu opens a grid of cards. Each card is one area of tenant configuration. Every card in the table below is documented in this guide.

What it is. Logs on the side menu shows the platform wide audit. Every row is one recorded event across the tenant.

1. Open Logs from the side menu.
2. Press the + icon on a row to expand it for the full payload.
3. Filter the table to the rows you need.
4. Press Export at the top right to download the filtered view.

What it is. Roles are built from claims. A claim is the right to view or act on one part of the platform. Drag a whole module or specific claims into a role, then assign the role to a user.

Manage Roles, step by step

1. Open Settings > User Management.
2. Press Manage Roles.
3. Press the + to create a new role, or pick a role to edit.
4. Set the Role Name.
5. Drag components or specific claims from the library into the role.
6. Press Save.

Block Access: how custom flows become runnable

Granting a role's Associate Permissions is not enough to open a custom flow. Manage Roles has a Block Access section that lists every flow by UUID as checkboxes. The Administrator role alone carries every permission except per flow block access.

1. Open Manage Roles and pick a non-admin role, for example ALL ROLES.
2. Scroll past the Associate Permissions cards to the Block Access section.
3. Check the flow you want to grant, then press Save.
4. Open the user and associate that role alongside Administrator.

Adding a user

1. Enter First Name and Last Name.
2. Enter the user's Email.
3. Enter the Date of Birth. This field is required.
4. Assign one or more Roles.
5. Optionally add a Picture, Phone Number, and Department.
6. Press Save to create the user.

The DXP supports custom roles built from claims dragged into a role definition. The recommended starting roles for this audience are listed below. Your administrator can adjust the claims to match your operating model.

What it is. The configuration behind each client's profile page. Two tabs sit at the top: Verified Person and Verified Business. Each profile type is configured separately.

1. Open Settings > Client Profile.
2. Choose the Verified Person or Verified Business tab.
3. Set Client Title and Client Subtitle, the header on the client profile page.
4. Set the Show toggles for KYC Documents, Captured Documents, Signed Documents, and Interactions Table.
5. Set Run AML Screening Every X Days. The default is 3.
6. Set Alert Time Before KYC Expiry in days. The default is 30.
7. Set Alert Time Before KYC Renewal in days. The default is 1000.
8. Use Import to bulk import client profiles from a CSV.
9. Use Configure Client Profile to add custom data points and map them to flow outputs.
10. Press Save.

Configure Client Profile: mapping flow data onto the record

Configure Client Profile opens Map Profile Sources, the Clients Table Configuration. It maps Data Points Available For All Created Flows onto the client record fields Client Profile Data 1..N. Each mapped field shows its flow source, for example Demo flow > Engagement > Assisted Data Entry > Email. Each field also has two toggles, Is Displayed On Table and Is Filterable. Client Profile Data 1 is Client ID and is locked. This is the bridge between what a flow captures and what appears and is filterable in the Clients module.

What it is. The rule set that stops duplicate clients. It sits on the right side of the Client Profile page. The platform refuses to create duplicate clients across these dimensions.

1. Confirm Use biometric face encoding for uniqueness is on. It is on by default.
2. Add additional unique elements with the Search Column Name field, for example phone number or national ID.
3. Press Save to apply the uniqueness rules.

The Assign Client Profile Elements that must be Unique multi-select complements the biometric face encoding toggle. The elements you can mark unique are Client ID, Email, Phone Number, Birth Date, Name, Profile Picture, Time started, and Time Ended.

What it is. Risk Based Approach is on by default. Risk Levels show as colored badges (Low, Medium, High). The 0 to 10 strip below the badges shows the thresholds with sliders. The RBA Score column on Client Clear uses these tiers.

1. Add tiers with the + icon next to the risk badges.
2. Drag the slider to set the threshold between Low and Medium. The sandbox default is 3.00.
3. Drag the slider to set the threshold between Medium and High. The sandbox default is 8.00.
4. Press Save.

Configure Risk Profile

Configure Risk Profile opens Clients Risk Scoring Configuration. You pick data points from Data Points Available For All Created Flows and build a Clients Risk Score Structure by assigning Weights to rules, with a running Total Weights.

Each rule sets a Risk Behaviour. Contributes to Risk Score adds the rule's weight, and the summed total maps to a Low, Medium, or High band. Auto Classify on Value sets the risk level directly and overrides the score, for hard rules like a sanctioned country. Values Classification Mapping maps each possible value to a weight or a target level. See the Compliance guide for the full walkthrough.

What it is. The tenant wide AML controls, custom lists, and the Screening Profile that decides which algorithms run and how they are weighted.

1. Set Perform Background Check On All Clients at the top of the page.
2. Set Flag Client Application On AML Match.
3. Use Add New List to add a custom list. Each custom list shows as a pill with a + icon.
4. Tune the Screening Profile weights described below.
5. Press Save.

1. Choose Data Persistence: On Cloud, or On Premise with a proxy address.
2. Set Support Email and Billing Email.
3. Set the Time Zone for the tenant.
4. Turn on Dual Maker / Checker Control if you want two approver control on settings and flow changes.
5. In Theme Settings, use Upload Primary Logo to set your brand logo.
6. Set the Client Profile Types toggles for Person, Verified Person, and Verified Business.
7. In Payment Gateway, enter the Merchant ID, Key, and Shared Secret Key for the tenant payment gateway.
8. Press Save.

What it is. The SMTP server the tenant uses for all flow notifications. Once set, emails appear to come from your domain, not Assentify.

1. Enter the SMTP Mail Server.
2. Enter the User Name.
3. Enter the SMTP Port Number.
4. Enter the account password.
5. Enter the Sender Email.
6. Toggle SSL Required and Authentication Required as needed.
7. Press Save.

What it is. The session length and password policy for every user in the tenant.

1. Set the Session length in minutes. The default is 15.
2. Set the Idle timeout (minutes) to log a user out after inactivity, separate from total session length.
3. Set the Password Policy toggles: Require Digit, Require Lowercase, Require Uppercase, and Require Non-Alphanumeric.
4. Set Required length. The default is 9.
5. Set Required Unique Chars. The default is 1.
6. Press Save.

What it is. Connections to your own systems. Each data source is a card with a pencil to edit and a + icon to add. Each source holds endpoints (Pull Data Request, Push Data Request, JSON File) with headers, body, and optional XSLT transformation. The card level source types are Data Source, Webhook, and Integration Government.

1. Press the + icon to add a source.
2. Enter the source name.
3. Choose the Data Source Type: REST, Soap, or Data Set.
4. Choose the auth: API Key or Basic Auth.
5. Enter the URL and credentials.
6. Press Test.
7. Press Save.

What it is. Your subscription usage and invoice history. The top shows an Interactions chart by Week Of, and a Your Usage card with Total Allowed, Total Consumed, Total Over, and a percent donut. The bottom is the invoice table.

What it is. The security controls that protect every account in the tenant.

Keep the tenant clean with a regular cadence of reviews.