How to work with Schwab Advisor Center® user security groups

How to work with Schwab Advisor Center® user security groups

A user security group (USG) is a set of accounts grouped by the functions their members Tooltip have permission to perform and the data to which they have access. The firm security administrator (FSA) Tooltip can change a user's access rights at any time by moving their account to a group whose access to functions is different.

If an account has been assigned to more than one USG, the account is granted the rights of each group; if one USG allows the user to perform a function but others do not, the user will be able to perform that function. Assigning or removing a website function affects all members of that USG.

You can use the Security Center on Schwab Advisor Center to create and delete USGs, manage memberships, add and remove functions, add and remove data access Tooltip in USGs, and manage access using security reports.

  • To use the Security Center, an FSA role with all assigned security administration functions is required.
  • For users needing Move Money and/or Trade Data Access, an Authorized Agent Designation Form signed by a Schedule A principal is required.

By default, Schwab automatically creates two USGs for each firm: a Security Administrator group and a General Users group. You may want to create additional user security groups to limit access or functions, such as trading, to certain members of your firm. This process is used to create a new USG.

  1. Click More > Launch Security Center > User Security Groups tab.
  2. Click the Create New Group link.
  3. Enter the new group name (must be unique and up to 30 letters). 
  4. You will be taken to the User Security Groups Update/View page, where you can add members, functions, and accounts to the group. See the appropriate sections on this page to complete setup for the USG.

By default, Schwab automatically creates two USGs for each firm: a Security Administrator group and a General Users group. You may want to create additional user security groups to limit access or functions, such as trading, to certain members of your firm. This process is used to copy an existing user security group to create a new USG. 

  1. Click More > Launch Security Center > User Security Groups tab.
  2. Select the group you with to copy.
  3. Name the new group.
  4. Select the elements of the Group you want to copy - members, functions or accounts. 
  5. Save the new group.

To add or remove a member in a USG:

  1. Click More > Launch Security Administration > User Security Groups tab.
  2. Select a USG from the list.
  3. Group membership is maintained in the Membership Update section.
    • To add a member, select one or more Tooltip users from the Unassigned Members list and click Add >>. The selected member(s) move(s) from the Unassigned Members list to the Assigned Members list (arranged in alphabetical order).
    • To remove a member, select one or more users from the Assigned Members list and click << Remove. The selected user ID moves from the Assigned Members list to the Unassigned Members list (arranged in alphabetical order). 

Adding or removing a function affects all members of that USG. This process is used to add or remove functions in a USG.

  1. Click More > Launch Security Center > User Security Groups tab. 
  2. Select a USG from the list.
  3. Function access is maintained in the Function Access section in the middle of the page.
    • To add a function, select one or more Tooltip functions from the Unassigned Functions list and click Add >>. The selected function(s) move(s) from the Unassigned Functions list to the Assigned Functions list (arranged in alphabetical order).
    • To remove a function, select one or more functions from the Assigned Functions list and click << Remove. The selected function(s) move(s) from the Assigned Functions list to the Unassigned Functions list (arranged in alphabetical order).

This process is used to add or remove accounts Tooltip in a USG.

  1. Click More > Launch Center > User Security Groups tab. 
  2. Select a User Security Group from the User Security Groups list. 
  3. The default list displays master accounts and custom groups, but you can click Master accounts only or Custom groups only to filter the list.
    • To add data access, select one or more Tooltip master account/custom groups from the Unassigned Data list and click Add >>. The selected function(s) move(s) from the Unassigned Data list to the Assigned Accounts list (arranged in alphabetical order).*
    • To remove data access, select one or more master account/custom groups from the Assigned Data list and click << Remove. The selected function(s) move(s) from the Assigned Data list to the Unassigned Data list (arranged in alphabetical order). 

* Move Money and/or Trade Data Access permissions will result in Users in the Security Group being required to submit an Authorized Agent Designation Form to Schwab that is signed by a Schedule A Principal. The form is found in the forms library under the Account Management page.  

Occasionally it may be necessary to delete a USG. A USG can be deleted only if there are no users assigned. Use the steps described in the "How to add or remove a member in a user security group" section. This process is used to permanently delete a USG. 

  1. Click More > Launch Security Center > User Security Groups tab. 
  2. Select the name of the USG to be deleted from the list.
  3. Click Delete Group. A message window appears. Click Yes to delete the group or No to cancel. 

There are two security reports (a USG report and a user report) available to help you periodically review the security groups to make sure members do not have more access than they need.

  1. Click More > Launch Security Center > User Security Groups tab. 
  2. Select a group to review from the user security groups list.
  3. Click Export Security Detail Report.
  4. The default view is a list of members with links to get a detailed security report for a particular member. 
    • Click Function Access to display the functions assigned to the group.
    • Click Account Access to display the data access permission for the group.

Once you have submitted your updates: 

  • Access rights and membership are changed immediately for the group.
  • Use the View Security Detail Report for a printable overview of the permissions you have assigned or modified. Review security reports regularly.
Resource: FSA guide to managing users

Who is my firm security administrator (FSA)?
The FSA is an employee of your firm and not Charles Schwab; Schwab does not maintain a list of FSAs for every firm. If your firm is small, it may be a single individual or, in the case of larger firms, it may be an entire department. Consult your manager.

What can I do when I'm locked out?
Your firm has an FSA who can reset your password. The FSA is an employee of your firm and not Charles Schwab.

My firm is small. For convenience, can't we just share an ID and password?
No. While it may be more convenient to share IDs and passwords, it not only creates a security risk to your firm but increases the likelihood of login errors, which will lock everyone out of the system. In addition, unique IDs and passwords allow FSAs to selectively assign access to features, further increasing security.

I've just received an error message to contact the firm security administrator (FSA). Is there a number at Charles Schwab I can call to resolve this? 
No. The FSA works for your firm and not Charles Schwab. Your FSA will be able to resolve any security issues you may encounter. Most error messages are the result of the account being locked due to the entry of incorrect login credentials (e.g., incorrect password). Fixes, such as resetting your password, are performed by your FSA.

I can log in to Schwab Advisor Center®, but I can't access a particular feature. Who should I contact?
Your FSA controls access to system features. If you believe you have a business need for a particular feature, contact your FSA.

How to grant View Only access to Schwab accounts
How to use Group Manager
How to work with Schwab Advisor Center® security features