RBAC in KYC

1. Maker

Definition: The "Maker" is responsible for initiating the KYC process by collecting and submitting customer details for verification.

Responsibilities:

• Upload customer documents (Aadhaar, PAN, etc.).
• Enter customer details into the system.
• Start the video KYC session.
• Ensure initial compliance with RBI guidelines.

Use Case in Video KYC: A bank executive collects a customer’s documents and initiates a KYC session.

---

2. Checker

Definition: The "Checker" verifies and validates the data submitted by the Maker before approval.

Responsibilities:

• Review documents uploaded by the Maker.
• Check for any discrepancies or errors.
• Validate the video session for compliance.
• Accept or reject the KYC submission.

Use Case in Video KYC: A compliance officer at a financial institution reviews video footage to ensure that the customer's face matches the provided ID proof.

---

3. Admin

Definition: The "Admin" has complete control over the KYC system, managing configurations, user roles, and compliance settings.

Responsibilities:

• Set up workflow configurations (e.g., routing KYC sessions based on region).
• Manage access control for Makers and Checkers.
• Generate reports on KYC performance and compliance.
• Oversee fraud detection alerts.

Use Case in Video KYC: A compliance manager at a fintech company configures system rules to ensure RBI compliance in document verification.

---

4. Product Level Admin

Definition: A specialized admin role with access to specific product lines or services within the Video KYC system.

Responsibilities:

• Oversee only a designated product or service (e.g., credit card KYC vs. bank account KYC).
• Manage product-specific compliance settings.
• View and approve KYC sessions within their assigned scope.

Use Case in Video KYC: A Product Manager for Loans manages and monitors KYC sessions only for loan applicants, ensuring that verification criteria for loans are met.

---

5. View Only Admin

Definition: A restricted-access role that can view KYC processes but cannot make any modifications.

Responsibilities:

• Access real-time KYC status reports.
• Monitor audit logs for compliance tracking.
• Ensure regulatory bodies or senior officials can view KYC without interfering in operations.

Use Case in Video KYC: A regulatory auditor from an NBFC or Bank can review past KYC approvals but cannot approve or reject applications.