|
|
|
|
|
4 Select “Define Security Group Permissions” from left pane
4 The “Define Security Group Permissions” page appears.
4 The system displays the following detail at the top of the page.
Date Format |
The date format that is applicable to the login user. |
4 Specify the following details.
Security Group |
The description of the security group to which the permission are to be set. |
4 Specify the following detail.
Permissions To |
Indicate if the type of permissions that should be set for the selected security group. You can set permissions to view, edit etc. From the drop-down list box, select the required option. |
4 Specify the following detail
Rule |
The description of the rule based on which access permissions should be granted to the selected security group. Help available. |
4 Select the “Define Rule” hyperlink beside.
4 The system displays the “Maintain Stored Procedure” page which you can use to define and store a new rule based on which access permissions should be granted.
If you set access permission for all employees, it indicates that the to the selected security group can access employee assignment record details, on behalf of all the employees of the organization units interacting with the ‘Security Definitions’ component.
4 Select the “All Employees” check box to set access permissions to the employee details of all the employees.
If you exclude self, it indicates that the specified user-role combination has access permissions on the specified set of employees excluding access permissions to his/her employee details.
4 Select the “Exclude Self” check box to exclude access permissions to the user for the specified user-role combination to his/her details.
If you set access permission for all reporting employees, it indicates that the selected security group can access employee assignment record details, on behalf of the employees who report to the users who constitute the group. The maximum level of subordinates till which the users have access permissions is based on the value set for the ‘Level of Span of control’ parameter. For example, if the level of span of control is set as 02, the users will have access permissions to employees who are two levels below them in the hierarchy of the organization.
4 Select the “All Reporting Employees” check box to set access permissions to the employee details of all reporting employees.
The level of span of control indicates the level in the hierarchy of the organization till which the users should have access permissions for employee details. For example, if you specify the value as 02, it indicates that the users of the group have access permissions to details of employees till two levels below them in the hierarchy of the organization.
4 Enter the value in the “Level of Span of Control” field.
Default Level Span of Control |
The value set by default to indicate the level of span of control. |
Specify values for any combination of the details in the multiline. For example, if you specify the values for the department code, job level from and to details, it indicates that the users of the group will have permissions for all employees or all reporting employees, as set earlier, in that particular department and who fall within the indicated job level range.
4 Specify values for any combination of the following details.
4 Examples of giving specifications to obtain a restricted employee assignment records list:
4 You can specify code of the job in the “Job Code” field and “ * “ in the “Department Code” field. In this case, there is no need to specify “Job Level From” and “Job Level To” fields.
4 To access all the employee assignment records except that of the CEO, specify “ * ” in all the fields in the first row of the multiline and select “Yes” in the include field. In the second row, enter code of the CEO in the “Job Code” field and select “No” in the include field.
Employment Unit |
The description of the employment unit for which access permissions should be set for the security group. From the drop-down list box, select the required value. |
Department Code |
To view all the department codes containing specific characters, type in the starting character or characters of these department codes. |
|
Alternatively, type in these characters in any combination with wild cards. Example. DPT*, will search for those department codes that start with the prefix DPT. Other examples are *DPT12, DPT*12 and DPT12*. Help available |
|
If you enter “ * “ in the field, then all the employee assignment records, irrespective of department, will be fetched. “All” will be displayed in the “Department Description” field. If the system parameter 'Organization structure based on department hierarchy' is set to 'Yes' then on click of the Department Help icon in the grid the Help on Department with Hierarchy screen has to get launched. If the system parameter 'Organization structure based on department hierarchy' is set to 'No’ then on click of the Department Help icon in the grid the Help on Department with Hierarchy screen has to get launched. If the system parameter 'Organization structure based on department hierarchy' is set to 'Yes', display the columns Hierarchy code and chain number in the grid. |
Hierarchy Code |
The hierarchy code of the primary hierarchy to which the department belongs. |
Chain No. |
The chain number in the hierarchy which is being selected. |
Job Code |
To view all the job codes containing specific characters, type in the starting character or characters of these job codes. |
|
Alternatively, type in these characters in any combination with wild cards. Example. PROG1*, will search for those job codes that start with PROG1. Other examples are PRO*, PR*1, *G1. |
|
If you enter “ * “ in the field, then all the employee assignment records, irrespective of the job will be fetched. “All” will be displayed in the “Job Title” field. Help for Job Code has been introduced. The corresponding help screen would have the ‘Department’ control hidden. |
Job Level From |
Specify the code of the job level from which, the employee assignment records should be fetched. |
Job Level To |
Specify the code of the job level till which, the employee assignment records should be fetched. |
Note: The job level from and job level to fields should be specified only if you have specified an “ * “ in the job code field.
Grade Set Code |
To view all the grade set codes containing specific characters, type in the starting character or characters of these grade set codes. |
|
Alternatively, type in these characters in any combination with wild cards. Example. G*, will search for those grade set codes that start with G. Other examples are GS1*, *12, G*1. |
|
If you enter “ * “ in the field, then all the employee assignment records, irrespective of grade set will be fetched. “All” will be displayed in the grade set description field. |
Grade Code |
To view all the grade codes containing specific characters, type in the starting character or characters of these grade codes. |
|
Alternatively, type in these characters in any combination with wild cards. Example. CLR1*, will search for those grade codes that start with CLR1. Other examples are CLR1*, CL*RK1, *RK1. |
|
If you enter “ * “ in the field, then all the employee assignment records, irrespective of grade will be fetched. “All” will be displayed in the grade description field. |
Note: If “ * “ is specified in the grade set code field, then “ * “ must be specified in the grade code field.
Job Code |
To view all the job codes containing specific characters, type in the starting character or characters of these job codes. |
|
Alternatively, type in these characters in any combination with wild cards. Example. PROG1*, will search for those job codes that start with PROG1. Other examples are PRO*, PR*1, *G1. |
|
If you type * in the field, then all the employee assignment records, irrespective of job will be fetched. “All” will be displayed in the job description field. |
Work Location Code |
To view all the work location codes containing specific characters, type in the starting character or characters of these work location codes. Alternatively, type in these characters in any combination with wild cards. Example. WL1*, will search for those work location codes that start with WL1. Other examples are WL1*, *WL1 etc. If you type * in the field, then all the employee assignment records, irrespective of the work location will be fetched. “All” will be displayed in the work location description field. |
Business Unit ID |
To view all business unit ID codes containing specific characters, type in the starting character or characters of these business unit ids. |
|
Alternatively, type in these characters in any combination with wild cards. Example. BU1*, will search for those business unit ids that start with BU1. |
|
If you type * in the field, then all the employee assignment records, irrespective of the business unit id will be fetched. “All” will be displayed in the “Business Unit” field. |
Include |
Select “Yes” or “No”, from the drop-down list box. If you select |
|
“Yes”, you indicate that all the employee assignment records that satisfy the criteria specified in the corresponding row should be fetched. |
|
“No”, you indicate that all the employee assignment records that satisfy the criteria specified in the corresponding row should not be fetched. |
4 The multiline displays the values for the department description, job title, job level from description, job level to description, grade set description, grade description, work location description and business unit details in the corresponding fields only after values are specified for all the details in the page and the “Save User Permissions” pushbutton is selected.
Comments |
Any additional comments you want to specify pertaining to the details. |
4 Select the “Book” icon beside the comments field
4 The system displays a dialog box in which you can enter the comments.
4 Select the “OK” pushbutton in the dialog box to save the details.
4 Select the “Cancel” pushbutton to close the dialog box without saving the details specified.
4 Select the “Save Group Permissions” pushbutton to save the permissions set for the group.
Note: After specifying the access permissions for a security group, the value of the “Data Level Security Definitions Enabled” parameter should be changed to “Yes” through the ‘Set Employee Security Parameters” activity.
4 Select the “Delete Group Permissions” pushbutton to delete access permission to the security group.
4 Select the “Populate Group Permissions” pushbutton at the bottom of the page.
4 Select the “Refresh Group Permissions” pushbutton at the top right of the page so that the restricted employee assignment records list is generated for access by permitted users.
6 Hyperlinked topics below
Use this page to define security group permissions.
