SECURITY008 — Organization Entities, User Roles, and Access Levels

Xtrm is a global multi-tenant payment system. That means your company has one organization account (Prime Entity) worldwide, with separate entities underneath it for regional subsidiaries or any legal entity your organization owns. Regional user administrators can create and manage their own entity's profile, users, wallets, and role-based access independently, based on local needs.

Organizations and entities give you a way to reduce operational risk by centrally managing all your accounts and the users who have access to them, while configuring organization-wide policies.

In summary:

• Only one organization account is needed for your company globally.

• You can set up as many regional or subsidiary entities within the organization as you like.

• You can add as many single-entity and multi-entity regional/subsidiary users as you like.

• Wallet and service access are strictly controlled via security roles and settings.

• Existing master admin, controller, or manager users can add new regional users. See How to Add Entities and Users to Global Company Accounts.

Master admin considerations

One designated person — typically someone with signatory authority — is designated the Master Admin and should register the organization account (Prime Entity) using company headquarters details (e.g., register "ACME Inc HQ," not "ACME Region 1" or "ACME Region 2").

If you're a regional office, your company's organization account (Prime Entity) must be registered first. This is done at xtrm.com under company registration. If an organization account already exists for your company, you'll be notified and asked to contact the existing master admin, controller, or manager users to be added as a user for your region.

Because Xtrm operates as a financial service account under regulatory standards similar to a bank, the master admin should be someone with financial signatory approval within your company — typically from the executive team, treasury department, or finance group. This person isn't solely responsible for managing the Xtrm account; they can delegate responsibility to regional entity controllers, managers, and standard users.

Entities, user roles, and access levels together control the separation of access to wallets and funds. Regional entities can have access limited to their own wallets and functions — functionally similar to having separate accounts from a compliance and security standpoint, but with the benefit of global account compliance and consolidated reconciliation reporting. This structure also simplifies onboarding and ensures faster, more accurate payments, while keeping the right people limited to the right wallets, funds, and services.

Key terms

Entities

For step-by-step instructions on creating new entities and adding users to your global organization account, see How to Add Entities and Users to Global Company Accounts.

User roles and access levels

There are four levels of access. A master, controller, or manager user can edit any user in the entities they manage, provided that user is at a lower access level than their own.

✓ = Yes ✗ = No ○ = Optional (access-level setting)

Setting up a user

1. Create the user account by completing the required fields.

2. Selecting a system access level other than "Full" takes you to the access settings page, where you can set specific permissions per user.