Contact Us

Account Management — Trico Business Express User Administration

Account management inside Trico Business Express is where the business administrator shapes who sees what, who approves what, and who can touch the money. The module covers user provisioning, role assignment, permission scoping, account-level access control, IP whitelist rules, approval threshold configuration, audit trail review, and authorized signer coordination with the underlying Tri Counties Bank signature card. Controls here are the difference between a treasury workflow that supports tight segregation of duties and one that leaves the business exposed to insider risk.

Every company on Trico Business Express starts with at least one administrator whose authority flows from the Tri Counties Bank business account signature card. From that seat the administrator creates user IDs for controllers, bookkeepers, owners, executives, and anyone else who touches the portal — each with a role template that dictates what the user can and cannot do. Fine-grained permissions, dual authorization thresholds, and account-level scoping let the control posture match the complexity of the business.

TCBK Login Guide Online Banking Features
Trico Business Express account management screen with user list, role assignment, and permission matrix

AI Summary — Trico Business Express Account Management

  • User administration module inside Trico Business Express for Tri Counties Bank business banking
  • Role templates: Administrator, Approver, Originator, Viewer, Bookkeeper — plus custom roles
  • Account-level scoping restricts user access to specific business checking, savings, or loan accounts
  • IP whitelist restricts logins to approved office, VPN, or home networks
  • Dual authorization thresholds configurable per payment type, dollar amount, and user role
  • 7-year audit trail captures every action — user ID, IP, device, timestamp, before/after values
  • Authorized signer coordination aligns online banking users with the signature card at the bank

User Roles and Permissions

Role templates cover the most common business banking responsibilities; custom roles handle edge cases.

RoleUser AdminBalancesWire InitiateWire ApproveACH InitiateACH ApprovePositive PayBill PayReports
AdministratorFullAll accountsYesYesYesYesYesYesYes
ApproverNoneAssignedNoYesNoYesYesApprove onlyYes
OriginatorNoneAssignedYesNoYesNoView onlyYesLimited
ViewerNoneAssignedNoNoNoNoNoNoYes
BookkeeperNoneAssignedNoNoLimitedNoView onlyYesYes
ExecutiveNoneAll accountsNoHigh-dollarNoHigh-dollarNoNoYes
CustomVariableVariableVariableVariableVariableVariableVariableVariableVariable

Role assignments also scope to specific accounts. A bookkeeper might access only the operating account; a controller spans all accounts. Permissions coordinate with OCC segregation-of-duties expectations.

Administrative Controls Beyond Basic Permissions

Account management goes deeper than role assignment. Several controls harden the company's posture against insider threat and external compromise.

IP whitelist configuration screen in Trico Business Express account management

IP Whitelisting and Geo Restrictions

IP whitelisting restricts Trico Business Express logins to the IP addresses or network ranges the administrator approves. Office networks, VPN egress points, and authorized home IP addresses make up typical whitelist entries. Users attempting login from outside the whitelist are blocked regardless of correct credentials. Temporary exceptions for traveling staff run on time-limited rules that revert automatically. Geo restrictions additionally block entire countries or regions from access — useful when the business has no legitimate reason for logins outside the United States.

Dual authorization threshold configuration in Trico Business Express

Dual Authorization and Approval Thresholds

Dual authorization separates payment initiation from approval. The administrator sets thresholds per payment type — wire transfers, ACH batches, bill payments — and per dollar amount. A small bill payment can post from an originator with write permission; a large wire transfer requires a second approver whose role includes wire approval authority. Triple authorization for high-dollar transactions routes through a second approver in addition to the first. Thresholds respect account scope, so a controller approving wires from the operating account does not inherit approval authority over other accounts.

Audit trail view in Trico Business Express account management

Audit Trail and Compliance Reporting

Every user action generates an audit trail entry with user ID, timestamp to the second, IP address, device fingerprint, and full before/after values for configuration changes. Logins succeeded and failed, payment initiations, approvals, user admin changes, and report exports all leave durable records. The 7-year retention window supports both internal compliance reviews and external examiner requests. CSV export carries the audit log into FDIC or California DFPI supervisory submissions when required.

Authorized Signer vs Online User — Two Distinct Concepts

California business banking maintains separate records of signature card authority and online banking authority. Both must stay in sync.

Signature Card at the Bank

The signature card at Tri Counties Bank lists individuals legally authorized to act on the business account — typically owners, officers, and designated treasury staff. Adding or removing a signer requires a signed amendment submitted to the bank with approval from existing authorized signers and, for entities, supporting resolution from the board or governing body. The signature card governs check signing authority, branch-facing transactions, and legal accountability for account activity. It is the source of truth for account authority.

Online User in Trico Business Express

The online user in Trico Business Express is a portal credential that the administrator provisions inside the account management module. The administrator maintains online users independently of the signature card, though they should be coordinated — a person removed from the signature card should be deactivated as an online user, and a new signer should receive a user ID if they need portal access. The administrator has authority over online users; only the business itself — through signed documents — can change signature card composition at the bank.

Administer Trico Business Express Users and Permissions

Role-based permissions, IP whitelist, dual authorization, and audit trails keep Tri Counties Bank business banking tight. Administrators shape the control posture to match the business. Call +1-800-922-8742 for administrator setup assistance or signature card questions.

TCBK Login GuideCustomer Service

Frequently Asked Questions — Account Management

Administrator role, role templates, IP whitelisting, audit trails, and authorized signer management.

Who is the administrator?

The administrator is the user designated at enrollment — typically an owner or officer named on the signature card. Administrators provision users, assign roles, configure IP whitelist, set approval thresholds, and revoke access. Larger companies designate two administrators for continuity. Administrator changes require signed authorization verified against the signature card.

What role types exist?

Administrator, Approver, Originator, Viewer, Bookkeeper, Executive — plus custom roles. Approver holds payment approval authority. Originator creates payments but cannot self-approve. Viewer is read-only. Bookkeeper is scoped to specific accounts. Custom roles combine permissions precisely.

How does IP whitelisting work?

Login is restricted to IP addresses or ranges approved by the administrator. Blocks access from outside the whitelist regardless of correct credentials. Temporary exceptions run on time-limited rules. Geo restrictions additionally block countries with no legitimate access reason.

What is the audit trail retention?

7 years of history retained inside the portal. Every action — logins, admin changes, payments, approvals, exports — captures user ID, timestamp, IP, device, and before/after values. Exports to CSV for compliance and regulatory examiners.

How do I manage authorized signers?

Signers on the Tri Counties Bank signature card change through signed amendments submitted to the bank. Online users in Trico Business Express are managed separately by the administrator but must align with the signature card. Deactivate removed signers as online users; provision new signers once the card change processes.