Leading US Bank · Business Access & Tools
SecureAccess: AI-Powered User Permission Management
Designed an AI assistant for small business owners to simplify the complexity of user permission management within the bank's Access & Security Manager — delivering guided setup, smart suggestions, and proactive security controls while keeping business owners firmly in charge.
Overview
The Opportunity: Simplify Permission Management for 8.7M SBOs
Business owners managing user access within the bank's Access & Security Manager face a high-stakes, low-guidance experience. Assigning the right permissions to the right employees is complex — and the consequences of getting it wrong range from operational inefficiency to serious security risk.
SecureAccess is an AI-powered assistant concept designed to transform this experience: offering step-by-step guided setup, role-based AI recommendations, real-time security alerts, and proactive error checks — while ensuring business owners retain full control and transparency over every decision.
The Problem
Managing Access Is Overwhelming and Opaque
"As a business owner, I need a streamlined and intuitive way to assign permissions to my employees that align with my business needs while maintaining robust security. The current process is often overwhelming and lacks clear guidance, leaving me uncertain about making the right choices. I either grant excessive permissions or handle tasks myself — leading to inefficiencies and increased workload."
The current ASM experience was built for operational completeness, not customer clarity. For a small business owner who isn't a security expert, the friction was real and the stakes were high.
Core Pain Points
Complex Permissions Management
Overwhelming processes and lack of clear guidance left owners uncertain they were assigning the right access levels.
Inadequate Security Notifications
Notifications failed to provide timely, actionable information — leading to excessive access grants or undetected security gaps.
No Intelligent Guidance
No system helped owners understand what permissions were appropriate for a given role — decisions were made by trial and error.
Cognitive Overload
The mental load of managing access — particularly across multiple employees and accounts — caused owners to either over-delegate or avoid the task altogether.
Current state of the bank's Access & Security Manager — the dense, guidance-free experience that SecureAccess was designed to replace.
Market Context
AI Is Transforming Financial Services — Permission Management Is Next
AI adoption in banking has accelerated dramatically, with institutions leveraging AI to enhance account access, security, user experience, and overall productivity. The data showed a clear case for bringing AI-driven assistance into the permission management workflow.
User Research
Five Insights That Shaped the Design Direction
Research with small business owners surfaced consistent, actionable themes. These findings directly informed every design decision — from the AI suggestion model to the transparency and control mechanisms built into SecureAccess.
Need for Simpler Guidance
Users wanted easier, step-by-step help when setting up permissions — with clearer explanations and suggestions tailored to their business type and employee roles.
Desire for Control
Users were open to AI assistance but wanted to retain final decision-making authority — especially concerning financial access levels. AI must advise, not decide.
AI for Error Checking & Alerts
Users were comfortable with AI helping to spot problems, suggest improvements, and send security alerts — but not for making final permission decisions autonomously.
Security as a Top Priority
Business owners prioritized data protection above all. AI-driven features needed to feel secure, transparent, and easy to understand — or they would be distrusted.
Frustration with Existing Bank Processes
Users found adding users to bank accounts confusing and time-consuming. The process lacked feedback, confirmation, and any form of guidance — indicating a clear need for simpler, more user-friendly systems. Many resorted to calling support just to complete basic access changes.
Research synthesis from SBO interviews and usability sessions — five recurring themes that defined the SecureAccess design brief.
The Solution
SecureAccess: Smart, Secure, and Simple
SecureAccess is an AI assistant embedded in the bank's Access & Security Manager that guides business owners through every step of user permission management. It combines personalized AI recommendations with full user control — making the right choice the easy choice, without removing the owner from the driver's seat.
Interface Design
Access & Security Dashboard
The dashboard provides business owners with a complete overview of user management and access control. Real-time alerts surface security concerns immediately. AI Assistant is always accessible for in-context guidance. Account activity is actionable, not just informational.
High-fidelity SecureAccess dashboard — real-time alerts, AI-assisted user management, and at-a-glance access control for small business owners.
User Flow
A Four-Step Guided Experience
The AI-assisted flow breaks the complex task of adding a new user into four clear, manageable steps — with AI suggestions available at every stage and full user override at any point. The goal: make the right choice obvious, not just possible.
- User information form
- AI role suggestion panel
- Option to turn off AI suggestions
- AI account recommendations
- "Why this?" transparency feature
- Manual override available
- Proactive security tips
- Predefined role templates
- AI-suggested permissions
- Permission risk detection
- Scenario-based guidance
- Complete access summary
- AI security assessment
- Edit at any prior step
- Confirmation email sent
Steps 1–2: AI role suggestion and account selection with "Why this?" transparency.
Steps 3–4: Permission risk detection and AI-assisted confirmation before finalising access.
Expected Outcomes
What SecureAccess Delivers
The design targets four measurable outcomes — each directly mapped to the research findings that revealed where business owners were most frustrated, most at risk, and most in need of support.
Responsible Design
Ethical Considerations Built Into the Design
Deploying AI in financial decision-making introduces meaningful ethical obligations. Each concern was addressed through deliberate design choices — not treated as an afterthought, but woven into the product architecture from the start.
- Final decisions always remain with the business owner
- AI suggestions are clearly labeled as optional and overridable
- Scenario-based guidance helps users make informed choices
- "Why this?" feature explains the logic behind every suggestion
- Visual diagrams show the full access picture
- Regular updates communicated through the notification system
- Robust encryption and secure authentication protocols
- Clear communication of data protection measures
- Proactive security tips to enhance user confidence
- AI balanced with full manual override at every step
- Explanations encourage critical evaluation of suggestions
- Education resources accessible throughout the flow
- Regular audits of AI algorithms for bias and accuracy
- Diverse training data across business types and industries
- User feedback loop to continuously improve fairness
- Seamless escalation path to client services
- Hybrid model: AI assistance + human support co-exist
- Clear pathways for escalating complex issues
Ethical design framework built into SecureAccess — ensuring AI recommendations are transparent, overridable, and free from demographic bias.
Strategic Roadmap
Define → Design → Deliver
SecureAccess follows a phased rollout strategy designed to validate assumptions with real users before full deployment — ensuring the AI recommendations are trusted, accurate, and aligned with how business owners actually work.
Strategic Impact
Simplifying Access, Strengthening Trust
SecureAccess demonstrates that AI-driven design can transform one of the most anxiety-inducing tasks in small business banking into a confident, guided experience — without removing human judgment from the equation.
By emphasizing user-centric design, personalized AI solutions, and robust security, the product positions the bank as a trusted partner for small business owners managing the complexity of employee access — enhancing operational efficiency, security, and user experience simultaneously.
The design also establishes a reusable pattern for AI-assisted decision-making within the bank's broader product suite: guided recommendations, transparent reasoning, full override capability, and seamless escalation to human support.