Deleting Users
Safe4 has always provided a facility for users to be removed from provider accounts or vaults, as well as by the Manage User functions described in the Advanced System Admin section of the Guide. However, when such removal was carried out previously the user account was retained, even if the link to a provider or vault had been broken. Users who had been removed in this way could still login to Safe4, even though their account gave no access to providers or vaults.
GDPR Requirements
Since the Regulation requires complete deletion of a user account, this action has been altered so that the user’s connection to a provider or vault is removed totally. It is possible that a user removed from one Safe4 provider or vault may still be able to access another, even after their permanent removal from the specified account. However, if a user only has access to a single provider or vault, removing them as a user will completely prevent any further access to any part of the system. An error message will be displayed if they try to login to the system.
A user removed in this way will have to be re-invited if their access to Safe4 needs to be reinstated. If this is done, they will have to choose a different username when creating a new account. Although the previous account has been deleted, the Safe4 audit trail records the fact that certain activity took place when the previous user account was active.
Removal of provider and vault users follows the same process as previously. For example, if a user is to be removed from one of the vaults within the Alpha & Omega Partners LLP provider account, the Vault users page can be displayed by clicking the Users option under the Actions box menu:
Selecting this option will show the Vault users page:
The red crosses against each user name represent the option to delete that specific user. Similarly to the deletion of providers and vaults, deletion of a user is permanent and can only be reversed by re-inviting the individual concerned and a new user account being set up.
Clicking one of the red crosses will display a warning message. No second warning will be given.
Deleting provider users follows an identical process, and also results in the user being removed completely from the system. Similarly, if a provider user needs to be given access to Safe4 after being removed, they will need to be re-invited.
