Security

The security aspects of the hrallow you to grant system access to selected employees/incumbents and control the areas of the system they can access.
By linking an employee to a user security profile of “Line Manager” hris able to determine which employees this person can view/access.
This is done when the system checks which position the employee is linked to (an incumbent) in the Position Structure.
The system then checks which positions report to this employee’s position within the position structure and then compiles a list of those employees/incumbent for viewing.

 

This is true of the:

• Employee file (F3 search)

• The hr Position Structure

• Reports.

There are three pre-defined user types within the system which contain all the privileges and permissions required for hrmanagement access.
If these roles do not suit your purposes, it is recommended that you create an additional role rather than modifying an existing role.

There are three pre-defined HR users which can be applied: 

• HR line manager – direct gives the user access to their own file and those incumbents who are direct reports (those incumbents one level below them in the position structure).
  Line managers by default can search for, view and maintain employee files.
  They have full access to the org chart, positions, incumbents and validation tables.
  By default, they have access to all reports, unless otherwise specified.
• HR line manager – multi gives the user access to their own file and multiple incumbents who fall below them in the position tree.
  Line managers by default can search for, view and maintain employee files.
  They have full access to the org chart, positions, incumbents and validation tables.
  By default, they have access to all reports, unless otherwise specified.
• HR manager has full access to employee files, to create, view, maintain, archive and re-instate.
  In addition, they can maintain and view all elements of the org chart, positions, incumbents and validation tables.
  By default, they have access to all reports, unless otherwise specified.

 

The employees which these three users can “see” via hr, F3 search and reports are controlled by the user being linked to an actual incumbent within the position tree.
This is done via the "linked employee" setting of a payroll user.
For a detailed list of the default permissions for each role, in Security > User Maintenance window select the
Rolesnode, then double click the relevant roles.
There are several steps when creating a new line manager, see Setting up Security for Users for more details.

Related Topics