Special Topic: Employee Level Security

Summary

Use the Employee Security feature to limit the information seen by users in the Employee Information and Employee Groups screens. Accomplish this by selecting the Apply Employee Level Security checkbox in the Security Roles screen. If you select this checkbox, users that are assigned that particular security role will see only those employees whom they supervise.

How to Initialize Employee Level Security

  1. Employee Groups - If the employee is not already a supervisor of a particular group, set him up as a supervisor for the appropriate groups/employees. Open the Employee Groups screen in the Personnel menu. Assign the appropriate functional role.

  2. Update an existing security role or create a new security role with the activated employee level security feature. Open the Security Roles screen in the Administration » Users & Groups menu and select the Apply Employee Level Security checkbox for the appropriate security role.

  3. Make sure the appropriate supervisor is assigned the correct security role. Open the Employee Information screen from the Administration » Users & Groups menu and, if necessary, update the Security Role field on the Defaults tab with the security role from the previous step.

Example of Employee Level Security Usage

You want to limit employee Z's access to employee group Z.

  1. Create employee group Z. Open the Employee Groups screen and create employee group Z. Assign employee Z as the supervisor with the appropriate functional role.

  2. Apply employee security. Open the Security Roles screen.  Select the Apply Employee Level Security checkbox for the security role that is assigned to employee Z.

Employee level security is enforced for any employee who is assigned this security role.  

  1. Verify the security role. Open the Employee Information screen. Check the role assigned to employee Z in the Defaults tab. Make sure it matches the security role from the previous step.

  2. When employee Z opens the Employee Information screen and does a search, he will see only employees from Group Z. When employee Z opens the Employee Groups screen, he will see only employee group Z.

To give employee Z the ability to update and/or delete employee information, update his functional role so that he has Modify Employee rights. To give employee Z the ability to update and/or delete employee group information, update his functional role so that he has Modify Employee Group rights.