Business software user or provider

If you use Standard Business Reporting (SBR)-enabled software or you’re digital service provider, you can use Relationship Authorisation Manager (RAM) to:

  • create machine credentials to interact with government online services through your software
  • notify government agencies about the software you’ll be using to interact with them through My Cloud software services.

On this page:

Machine credentials

When you install a machine credential on a device, you can interact directly with government online services through your business software.

Machine credentials replace any AUSkey used in your software.

You’ll need to create a machine credential if you:

  • are a digital service provider who offers cloud-based SBR-enabled software. You’ll need to install it on your server to enable software authentication by third-party users.
  • use desktop or locally hosted software. This performs the same function as an Administrator or Standard AUSkey in your software. Your digital service provider will let you know when your software has been updated.

If you use cloud-based SBR-enabled software, you will not need to create a machine credential. Instead, your digital software provider will install it on their server.

Find out about:

Who can create a machine credential

You can create a machine credential if you are a:

  • principal authority
  • machine credential administrator (MCA) as assigned by a principal authority or authorisation administrator.

Once the machine credential is created, the principal authority or MCA will be responsible for the use of it in the business.

Terms and conditions

Ensure you read the myGovID terms of use - machine. This covers the terms and conditions of using a machine credential.

See also:

How to create a machine credential

Before you start, make sure you have read the myGovID - terms of use for machine credentials. 

You will need to download and install the software (Machine credential download/browser extension) compatible with your device’s operating system:

  • Windows – Chrome and Firefox
  • MAC OS – Chrome and Firefox
  • Linux – Chrome and Firefox

A machine credential is created and stored in a key store file on your device or server. Your key store path is pre-filled or you can choose your own. You will need to direct to this location when installing your software.

Watch, How to create new machine credentials in RAM video or use the How to install a machine credential guide which includes the steps you need to complete and details on installing the browser extension.  

Machine credential permissions

When you first create a machine credential, it will not display in ATO’s Access Manager immediately.

If you use the machine credential with desktop software, it will work with full permissions immediately. After the first use, it will be visible in the ATO’s Access Manager and include all permissions by default. A principal authority or an authorisation administrator can amend these if required.

How to revoke a machine credential

  • Select Manage authorisations
  • Select the business name you would like to revoke the machine credential from
  • Select Manage Credentials
  • Find the machine credential you want to revoke and click Revoke  
  • You will need to confirm that you want to revoke the credential, click Continue
  • A success message will appear. Click Continue and you will return to the Manage credentials tab. The machine credential will now show a status of revoked.

Once revoked, you will not be able to use or reinstate the machine credential.

Unassigned machine credentials

If a principal authority or authorisation administrator removes the role or authorisation of an MCA, the machine credential becomes ‘unassigned’. It will display as ‘Suspend’ in RAM but remain active for 60 days from the date of removal.

During this period, another MCA can claim the unassigned machine credential and continue using it.

To claim an unassigned machine credential:

  • Select View or manage authorisations, machine credentials and cloud software notifications from the home menu.
  • Select the business name you would like to claim the machine credential for
  • Select Manage Credentials.
  • Find the machine credential you want to claim, click Edit then Claim credential.
  • A success message will appear. Click Continue and you will return to the Manage credentials tab. The machine credential will now show a status of Active.

My cloud software services

My Cloud Software Services lets you notify government agencies about the cloud based Standard Business Reporting (SBR)-enabled software you will be using to interact with them.
Currently, My cloud software services can only be used with the Office of the Student Identifiers Registrar, Department of Employment, Skills, Small and Family Business.
You need to be a principal authority or authorisation administrator to submit and manage notifications in RAM. Your digital service provider may also submit the notification which needs to be accepted before it becomes active.

Note:  this does not mean they can act online on behalf of your business.

Find out how to:

  • add a notification
  • request a notification (digital service providers only)
  • accept a notification
  • edit a notification
  • remove a notification

How to add a notification

To add a notification, you will need the:

  • name and Australian business number (ABN) of your digital service provider
  • unique software ID (10 digit number) provided by your digital service provider.

You will then complete the following:

  • Select the business you are sending the notification for
  • Select Manage notifications and then Add notification
  • Select the digital service provider
  • Enter the:
    • unique software ID -  click Add another if more than one software ID is supplied
    • start date – this can’t be back dated
    • end date – this field defaults to ‘No end date’, however you can include an end date if required.
  • Tick the box of the agency you wish to access (currently only available for Office of the Student Identifiers Registrar)
  • Check the details are correct, accept the declaration and select Submit.

How to request a notification

If you’re a digital service provider, you can request a notification for one of your user’s by completing the following:

  • Select Request notification
  • Enter the ABN of the user and click Check. Details of the client will display.
  • Enter the:
    • software ID for the user
    • start date – this can’t be back dated
    • end date – this field defaults to ‘No end date’, however you can include an end date if required
  • Tick the box of the agency you wish to notify (currently only available for Office of the Student Identifiers Registrar)

A confirmation message will display advising that you have successfully requested a notification and the requested notification will appear as pending until it is accepted by the user.

How to accept a notification

  • Select the business with the pending notification
  • Select Manage notifications and locate the notification with the ‘Pending’ status and click Edit
  • Check the following details are correct (these will be pre-filled):
    • name of the digital service provider
    • Software ID – click Add another if more than one software ID is supplied
    • start and end dates
    • agency to notify (currently only available for Office of the Student Identifiers Registrar)
  • Accept the declaration and select Submit.

How to edit a notification

  • Select the business you want to edit the notification for
  • Locate the notification and click Edit
  • Edit the following fields as required:
    • Software ID – select Add another if more than one Software ID was supplied
    • start and end dates
  • Once you’ve updated the relevant details, accept the declaration and select Submit.

How to remove a notification

  • Select the business you want to remove the notification for
  • Locate the notification you’d like to remove and select Edit
  • Select Remove