Show download pdf controls
  • Access and permissions

    Assigning and managing permissions for staff is one of the main functions of Access Manager. It enables businesses to manage which ATO online services and functions their employees can access.

    Administrators

    Administrators (Administrator AUSkey holders or connected myGov users with Administrator access) have unrestricted access to ATO online services such as the portals. Called Access Administrators, they also have the ability to set Standard user permissions in Access Manager.

    Once you assign permissions to Standard users, anything they do within ATO online services is legally binding to your business.

    Standard users

    Standard users (Standard AUSkey holders or connected myGov users with Standard access) have a very limited access to ATO online services by default. To gain authorisation to access more services, they must be assigned specific permissions in Access Manager by an Administrator or an Access Administrator. Standard users cannot login to Access Manager unless they are made an Access Administrator.

    New Standard users must login for the first time to a portal before an Administrator can see their account in Access Manager.

    Device AUSkeys

    Device AUSkeys are used for computer to computer transactions, through the SBR channel. Although Device AUSkeys have a human custodian (an Administrator or Standard AUSkey holder) they require their own set of permissions to transact on behalf of a business, assigned by an Access Administrator.

    An initial transaction with a new Device AUSkey, through the SBR channel, must be performed before an Administrator can see the account in Access Manager.

    Access Administrators

    Standard users who can manage the permissions of other Standard users and perform other functions in Access Manager are called Access Administrators. Only a 'full' Administrator can authorise a Standard user to become an Access Administrator.

    An Access Administrator can login to Access Manager to modify the access and permissions for other Standard users in the business.

    A Standard user who is an Access Administrator cannot appoint other users as Access Administrators or modify their own access.

    Permissions

    Access Manager permissions for ATO and ABR online services provides a full list of permissions and which online service they provide access to.

    Assign access and permissions

    For Administrators to assign permissions to their Standard users:

    • Select Access and permissions from the left hand menu.
    • Select the user in the table. If the user isn't listed, they need to log in to our online service (such as the portal). This creates a profile and the user will display in the table.
    • Select the relevant permissions. The Select all and Clear all buttons above the list can be used to select or clear all permissions for the user.
    • Select Save.

    Copy permissions

    To copy the permissions for one user to another:

    • Select Access and permissions from the left hand menu.
    • Select Copy permissions from the blue menu bar.
    • Select the user that you want to copy the permissions from the drop down list.
    • Select the user that you want to copy the permissions to. You can select one user or multiple users.
    • Select Save.

    Manage access

    To manage access:

    • Select Access and permissions from the left hand menu.
    • Select the user in the table.
    • To modify access
      • Access Administrator: To add or remove access for an Access administrator, select the No or Yes radio button. If Yes is selected, the user will have the authority to log in to Access Manager and update permissions for other standard users.
      • Account status: To change the status of the account, select the Active or Disabled radio button. If Disabled is selected, the user will not be able to log in to Access Manager or any ATO online services such as the portals. A disabled account can be reactivated by selecting the Active radio button.
      • Select Save.
    • To remove user
      • Select Remove account. If removed, the user will not be able to log in to Access Manager or any ATO online services such as the portals. A removed account does not cancel the user's AUSkey. A removed account can be restored and made active.
      • Select Confirm.
    • To restore user
      • Select Access and permissions from the left hand menu.
      • Select Past credential holders history from the blue menu bar.
      • Select Restore for the relevant user.
      • Select Confirm.
      • Select the restored user in the table on the Access and permissions page.
      • Select Active against the Account status.
      • Select Save.
    • To view information about when a user was removed or restored
      • Select Access and permissions from the left hand menu.
      • Select Past credential holders history from the blue menu bar.
      • Select the user.
      • Select Close.
      Last modified: 21 Mar 2018QC 40983