Compliance & Security

Permissions Are a Business Control, Not a Settings Page

Every permission is a business decision. Nexum lets you grant exactly what each role and person needs, and nothing more.

Every permission you grant is a decision about risk. Make it on purpose.

Summary

Permissions decide who can see SSNs, change balances, approve settlements and export data.

Least privilege and separation of duties cut security risk and operational mistakes.

Nexum combines roles, per-user App Access, client scoping, suspension and sign-in history.

Key takeaways

Write what each role must be able to do.

Review access quarterly and on every role change.

See Nexum's User Management in a demo.

Permissions are policy

User setup isn't an IT chore. It decides who sees Social Security numbers, changes balances, approves settlements, exports client portfolios and changes compliance settings.

Least privilege, by role

Start from what each role needs to do its job, and grant only that:

Collectors: search and open assigned accounts, log contacts, add notes, change status, record payments, file disputes, attach documents, request help through tasks.

Supervisors and admins: everything collectors do, plus reassign accounts, approve requests, manage clients and imports, delete documents, see team activity.

Finance: payments, reconciliation, commissions and remittance; not necessarily call workflows.

Clients: only their own portfolio, and only the menus you allow.

Owners and super admins: agency settings, credentials, compliance rules, module management.

Separate duties where it matters

The person who changes a balance shouldn't be the only one who approves it. The person who manages credentials shouldn't be every user. Separation of duties reduces error and fraud.

Apps, not just roles

Beyond roles, decide which tools each person uses. A collector who doesn't run campaigns doesn't need the campaign tool on their menu.

Review regularly

Quarterly access review: who has what, and should they?
On role change: remove old access, not just add new.
On departure: suspend the same day.

Test it

Sign in as each role (or ask the vendor to demonstrate) and try to do things that role shouldn't. Try to reach another client's data from a client login.

Measure it

Users with elevated roles (keep it small).
Access review completion.
Time from departure to suspension.

How Nexum controls access

Nexum separates agents, admins, owners and client (creditor) users with clear capability differences. User Management adds per-user App Access, suspension, sign-in history and an optional time clock. Clients see only the portal menus you choose. Agency settings like Service Credentials are visible only to authorized administrators.

The bottom line

Design permissions as business controls. Nexum makes them precise and easy to prove. See who can see which account.

See it working in your agency

Book a 30-minute guided Nexum demo built around your agency's real bottleneck, or call 502ZONE directly at (786) 524-4252. Nexum Open CRM is free: no license fee, no seat fees, no subscription. Add 502ZONE modules only when you want more recovery.

Bring us your most expensive collections problem.

Our guided 30-minute session focuses on your real workflow and the problem costing you the most.

Schedule a Demo