Configuring Consent Management Dashboards for Australia

After a certain period, some consumers may prefer to revoke the consents/sharing arrangements they granted the Data Recipients to access account data. In WSO2 Open Banking, you can manage and revoke these consents/sharing arrangements as follows:

---

Revoking consents/sharing arrangements by consumers

The WSO2 Open Banking Consent Manager portal also known as the Self-care portal, enables consumers to review and revoke the consents/sharing arrangements they provided to access account details. 

Let's take a look at how a consumer can revoke a sharing arrangement.

1. Go to the Consent Manager portal at https://<WSO2_OB_IAM_HOST>:9446/consentmgt.

   

2. Enter the username and password provided by the bank. Click Continue.

3. In the Consent Manager portal's home page, you can view a list of consents/sharing arrangements you have granted access to account information.
   Their status is displayed to the right of the selected CDR Arrangement ID. Available statuses are Rejected, Awaiting authorisation, Authorised, and Revoked.
   

4. Select a CDR Arrangement ID to view its details. 
   

   A consumer can grant permissions to these sharing arrangements. 

    Click here to see the available permissions.

   The table below defines the available permissions with the corresponding authorisation scope and the actual data the consent has access to.

   Permission name	Authorisation scope	Data
   Organisation profile	common:customer.basic:read	Agent name and role Organisation name Organisation numbers (ABN or ACN) Charity status Establishment date Industry Organisation type Country of registration
   Organisation contact details	common:customer.detail:read	Organisation address Mail address Phone number
   Organisation profile and contact details	common:customer.detail:read	Agent name and role Organisation name Organisation numbers (ABN or ACN) Charity status Establishment date Industry Organisation type Country of registration Organisation address Mail address Phone number
   Account name, type and balance	bank:accounts.basic:read	Name of account Type of account Account balance
   Account numbers and features	bank:accounts.detail:read	Account number Interest rates Fees Discounts Account terms Account mail address
   Account balance and details	bank:accounts.detail:read	Name of account Type of account Account balance Account number Interest rates Fees Discounts Account terms Account mail address
   Transaction details	bank:transactions:read	Incoming and outgoing transactions Amounts Dates Descriptions of transactions Who you have sent money to and received money from; (For example, their name, BSB, account number)
   Direct debits and scheduled payments	bank:regular_payments:read	Direct debits Scheduled payments
   Saved payees	bank:payees:read	Names and details of accounts you have saved (For example, their BSB and Account Number, BPay CRN and Biller code, or NPP PayID)

5. If the consumer wants to stop the sharing arrangement with the Data Recipient, click Stop sharing.
     

6. Optionally, you can enter a reason for the revocation.

   Revocation reasons help you to find more information later. It is not mandatory to provide a reason for revocation.

   

7. Click Revoke to confirm the revocation. 

8. The status of the CDR Arrangement ID is now changed to Revoked.  

---

Revoking consents/sharing arrangements by Customer Care Representatives

The WSO2 Open Banking Customer Care portal enables the Customer Care Representatives to revoke the sharing arrangement on behalf of the consumers.

Let's take a look at how a Customer Care Representative can revoke a sharing arrangement.

1. Sign in to the Customer Care Portal (https://<WSO2_OB_IAM_HOST>:9446/ccportal) using the username and password of a user with the Customer Care role. See Configuring Users and Roles, for more information on user roles.

   

   Troubleshooting

   If you get hostname verification errors when accessing the Customer Care portal, add the following to the <WSO2_OB_IAM_HOME>/bin/wso2server.sh file and restart.

   • Dhttpclient.hostnameVerifier="DefaultAndLocalhost" \
   • Dorg.wso2.ignoreHostnameVerification=true \

2. You can filter and search for CDR Arrangement IDs.
   
   Filter based on the following parameters:

   • User ID: The user ID created for the consumer in the online banking application. 

   • Application: The Data Recipient applications authorised for the Data Holder are listed here. You can select the application the consumer has given consent to.

   • Status: Select the status of the sharing arrangement. Possible values are: Rejected, Awaiting Authorisation, Authorised, and Revoked. 

   • Set Date Range: The date range in which the CDR Arrangement ID is valid.

     You can use one or more filter options and proceed to search.

3. Click Search.

4. A list of search results is displayed, as shown below. You can view the sharing arrangement information by clicking the CDR Arrangement ID.

   

5. Click the CDR Arrangement ID that you want to revoke and view its details. 
   

6. Click Revoke.

7. Optionally, you are asked to enter a reason for the revocation.

   Revocation reasons will help you to find more information later. It is not mandatory to provide a reason for revocation.

   
   

8. Click Revoke to confirm the revocation.