NAB Connect User Management: Roles, Permissions & Access
Multi-user banking is useful only when each user receives the right level of authority. Shared credentials may feel convenient, but separate user identities provide clearer accountability and make access easier to revoke when staff responsibilities change.
NabConn never asks for NAB Connect credentials
Use an official NAB-operated service for account authentication. Do not send NabConn your NAB Connect User ID, password, PIN, token code, one-time passcode, full card details or online-banking credentials.
Separate Identities Improve Accountability
Each authorised employee should use their own approved access rather than sharing another employee’s credentials. This creates a clearer audit trail and makes offboarding practical.
Match Permissions to the Job
View-only access, payment creation, payment approval and administration are different responsibilities. The safest design avoids giving every user every power.
Use Authorisation Rules Deliberately
Where transactions require multiple approvals, the approvers should be genuinely independent rather than one person controlling multiple credentials.
Offboarding Is a Security Control
Access should be reviewed promptly when an employee leaves, changes role or no longer needs a particular function.
Primary Sources Used for This Guide
Product terms can change. These sources are included so readers can verify current information directly before making an important financial or security decision.