Creating Custom Restrictions for Advanced Employee Permissions
You can create custom restrictions to restrict the instances that a role has access to the employee record by class, department, location, and subsidiary. For example, you may have a Human Resources department that is physically located in one location, but who support staff located in a different location. You can create custom Advanced Employee Permissions’ restrictions to give this department access to sensitive employee data for the staff they support. You can limit them to less sensitive information for the employees in their location that they do not support.
You cannot make changes to the standard restrictions that come with the Advanced Employee Permissions feature. This includes: Active and Non-Terminated, Inherit from Role, Own Only, and Subordinates.
To create custom restrictions for Advanced Employee Permissions:
-
Go to Setup > Users/Roles > Manage Restrictions > New.
-
In the Name field, enter a unique name for the restriction. The name entered here appears on the Role page, under the Employee Access subtab, in the Restrictions list.
-
If required, enter a description for the restriction.
-
In the Class list, select the classes that you want to include with the restriction. The classes selected from this list determine the classes this restriction is limited to. This means that roles that have a permission with this restriction can only access employee information for employees in the selected classes. Hold down the Ctrl key to select multiple classes or to deselect a class from the list.
-
From the Department list, select the departments that you want to include with the restriction. The departments selected from this list determine the departments this restriction is limited to. This means that roles that have a permission with this restriction can only access employee information in the selected departments. Hold down the Ctrl key to select the multiple departments or to deselect a location from the list.
-
From the Locations list, select the locations that you want to include with the restriction. The locations selected from this list determine the locations this restriction is limited to. This means that roles that have a permission with this restriction can only access employee information for employees in the selected locations. Hold down the Ctrl key to select multiple locations or to deselect a location from the list.
-
From the Subsidiaries list, select the subsidiaries that you want to include with the restriction. The subsidiaries selected from this list determine the subsidiaries this restriction is limited to. This means that roles that have a permission with this restriction can only access employee information for employees in the selected subsidiaries. Hold down the Ctrl key to select multiple subsidiaries or to deselect a subsidiary from the list.
-
Click Save.
To remove the restriction, from the Actions list, select Delete. When the restriction is assigned to a role you need to remove it from the role before you can delete it.