Resource Sharing via Vault Groups
The Master Merchant facility allows a Master Merchant and Sub Merchants to access and use shared resources, namely vault tokens. You can read more about our PCI-DSS compliant vault storage here. To put it briefly, you can collect your client's billing details and keep them safely in the form of vault tokens.
Shared vault tokens are a convenient and secure way of storing billing details when they are needed for various purposes. For instance, if all your Sub Merchants belong to the same company but are located in different branches which deal with customer's payments. The customer can make a payment with “Branch A” and from this, their card details are stored in our vault. Subsequently, if “Branch B” needs to access the same billing details of the customer for facilitating another payment, “Branch B” employees can access the vault, find the necessary vault token and use it for another transaction, instead of unnecessarily contacting the customer again for their billing details.
How it works at PayDock
You, as a Master Merchant, can create and manage a group of Sub Merchants who will have access to a particular entity, a vault token in this case. You can grant 'read' or/and 'execute' privileges to the group of Sub Merchants. Based on these privileges, they will be able to search and get a vault token by ID and/or use the vault token for certain actions respectively, for example, make a charge, create a customer, add a new payment source for the customer, etc. You decide what privileges the group will have and, consequently, what actions they will be able to perform. Sub Merchants can be included in several groups with different privileges.
To create a shared group, go to 'Shared Groups' in the Profile menu.
On the page that appears, follow these steps:
- Specify your group label to distinguish it among others.
- Global Entity is represented only by Vault now.
- Check the required privilege(s):
a. Read - this means the Sub Merchant can only view vault tokens without using them.
b. Execute - this means the Sub Merchant can use it, e.g., for creating a payment source for the customer.
- Choose a company either by name or ID.
- To add another company, click + next to the company fields.
- Once done, click Submit.
From the second tab Manage Group, you can edit or remove the group:
First of all, you should choose the group in question from the dropdown. Then you can change its label, add ('+') or delete companies ('-'), select and unselect privileges.
To remove the group, click the grey Remove Group button on the right side of the page.