Frequently Asked Questions - Nemlog-in

‘User organisation’ is the term for all companies, authorities and associations in Denmark that have been established in the CVR register. A user organisation that has entered into an agreement with the Danish Digitisation Agency can use the Erhvervsadministrationen.

Here, the user organisations can manage their employees’ user profiles, their rights to public self-service solutions and the employees', ie. users' use of authenticators, ie. NemID and MitID.
As an employee in a larger or smaller organisation that is registered in Erhvervsadministrationen, you will be created as a user with a user profile in Erhvervsadministrationen.

That way you will be assigned rights, power of attorneys and certificates by the administrator of your organisation. You also select how to identify yourself by an authenticator. You also receive notifications about activities you need to act on such as activating your authenticator.
As a user, you are created in Erhvervsadministrationen with a user profile. The administrator of the organisation can assign rights to the user to perform tasks within the organisation.

An organisation has three administrator roles attached. An organisation administrator, a user administrator, and a rights administrator.

In smaller organisations, the same person will usually have all three administrator roles. In larger organisations, it may be beneficial to assign the three roles to different users.
The Organisation Administrator is responsible for the organisation's settings in Erhvervsadministrationen and assigns administrator roles to other users and can create power of attorneys.

As an organisation administrator, you are the top administrator, and you have the task of managing the organisation's setup and appointing administrators for the users.
A service provider is an organisation, such as an authority, company or association, that has a self-service solution that offers users to log in with NemID or MitID.

A public service provider is, for example, an authority such as the Danish Tax Agency, municipality, library, Virk.dk or the public self-service solution Borger.dk, which is provided by the Danish Digitisation Agency.

A private service provider can be, for example, a pension company or an insurance company, a bank or a gaming issuer.
‘Authenticator’ is the common name for the NemID or MitID device that we use to confirm our identity when we log in to digital service providers.

In connection with his or her work, a user and an organisation can choose that users can use their personal NemID / MitID to log in on behalf of the organisation.

There are several types of MitID authenticators:
- MitID app is an app that can be installed on the user's mobile or tablet. When an action such as login or signing needs to be approved, the user can identify themselves and approve the action by using the app.
- MyTID Code Viewer is a physical device that generates a new code for each action to be authenticated. The user must enter the code on the screen to approve the action.
- MyTID code reader is a physical device that corresponds to the code viewer. A unique code is generated and read out by the device. The user enters the code on the screen to approve the action.
- MyTID chip is a physical device that is inserted into the computer's USB port. When an action is to be approved, the user presses the chip.
As a user in an organisation, you have the opportunity to use your personal NemID / MitID to log in to various service providers on behalf of the organisation, but this requires that both you AND your administrator in the organisation accept the use of personal NemID / MitID.

This acceptance required by both parties is called the ‘mutuel agreement principle.
As a user of an organisation, you can use your personal NemID or personal MitID to log in to various service providers on behalf of the organisation. The use of personal NemID / MitID requires that both the user and the organisation accept the use. It is also called ‘mutuel agreement principle’.

You can always change your acceptance and opt out of using your personal NemID / MitID in connection with your work. If you opt out, talk to your user administrator about having an alternative authenticator. When you deselect the use, you will of course still be able to use your personal NemID / MitID for private affairs.
A 'smaller organisation' is in Erhvervsadministrationen the term for a setup of an organisation with only one administrator and slightly fewer options for general settings in the organisation than is the case in the setup for 'larger organisations'. The administrator of a small organisation typically has rights both as a user, organisation, and rights administrator.
A 'larger organisation' is in Erhvervsadministrationen the term for setting up an organisation with several different administrator roles as well as slightly more options for general settings, including options for issuing certificates.

A 'larger organisation' typically has a user administrator, an organiation administrator, and a rights administrator.
Service providers can only choose to grant access to users who have been granted a specific right. They have therefore created special rights for their system. The organisation's rights administrator can assign the necessary rights to the user in Erhvervsadministrationen either when ceating a new user or later.

The basic package contains the most used rights and is a good starting point for users with general administrative tasks to solve in the public services.

Your users also have the opportunity to apply for rights themselves.
When you create a new organisation, you are assigned a CVR number. In addition, the CVR register assigns a parking number for each physical location used for activities relating to the organisation. It can be a production department, a sales department, etc.

Service providers, such as SKAT, may require the user in certain company forms to be associated with a P-number to provide access to reporting in their service.
An SE number stands for Tribal Register of Traders and is considered a sub-number for an organisation's CVR number.

The organisation's CVR number is the organisation's main number and the primary way of identifying an organisation today. However, for some company constructions, it may be advantageous to also have several SE numbers.

Service providers, such as SKAT, may require the user in certain company forms to be associated with an SE number to provide access to reporting in their service.
You must be an organisation administrator in your organisation to be able to create a power of attorney at the organisation level. This power of attorney can be used by several users in the organisation who receive the power of attorney.

A rights administrator can create a power of attorney at the personal level. Only the recipient of the power of attorney can use the rights.
A qualified user certificate has the same function as a regular user certificate but is issued with higher security requirements for identification and storage of the certificate.

A qualified user certificate can only be issued on secure hardware and requires that you can generate a Certificate Signing Request (CSR) to issue the certificate. Only a few services require qualified certificates.
An organisation certificate is a certificate issued to an organization, and it can be used when the organisation needs access to web and other services. It can also be used to encrypt the data going to and from the services. An organisation certificate can also be used for digital signing of documents (seal formation) on behalf of the organisation.

In addition, the organisation certificate can be used to sign documents so that you can see that it comes from a specific organisation, for example an authority.

The organisation can have more than one organisation certificate. Therefore, new organisation certificates must always be named so that one can distinguish between them.
A qualified organisation certificate has the same function as an ordinary organisation certificate, but is issued with higher security requirements for identification and storage of the certificate.

It can only be issued on secure hardware and requires that you be able to generate a Certificate Signing Request (CSR) to issue the certificate. Only a few services require qualified certificates.
As a user in Erhvervsadministrationen, you can apply for anonymity to protect your identity on your user profile. In practice, this means that your administrator creates a user profile where your identity is hidden from the service provider you are logging in to.

Once you have been created with a user profile, you can apply to your administrator for anonymity.
```
Under settings, the organisation administrator can specify whether the organization wants the user to allow anonymous user profiles. If you do not have an anonymous user profile, you can then apply to your administrator for anonymity.
```
Notifications are emails and messages in Erhvervsadministrationen for a user or an administrator about various activities and requests that the user or administrator must act on.

For example, a user is notified to activate his or her user profile, or an administrator is notified to get a certificate that has been ordered. In Erhvervsadministrationen, you will find notifications when you click the bell symbol. These notifications correspond to the emails being sent to users.