Enables you to set up and maintain operator IDs. Each user of the system must have an operator ID to access the system.

ⓘ  Before using this option, the security profile you are going to assign to the operator must have been set up on the system via Security Profiles.

To access this screen, enter fast path HROPRMAINT and select the operator.

Security

Name

Enter the operator's name. The operator's title, initials and surname may be selected in the Employee Number field. Therefore, you may want to use this field to hold a familiar name that you know the operator by, instead of repeating these details.

Employee Number

Enter the ID of the operator's employee number or select one by clicking window to display Employee Search. This employee number is used in conjunction with the Access fields below to prevent access to the operator's own details if required.

Profile

Enter the ID of the security profile that you want to assign to the operator to determine their access rights, or select one by clicking WINDOW to display Select Profile.

ⓘ  If you are creating a new operator, Password Detail is displayed for you to create the new operator's password. In addition, if the Use System Default Password field in User Level System Fields is set to Y, you are prompted to choose whether you want to use the system default password or not. If the password expiry date is set to either the current or a past date, the new operator is prompted to change their password the first time they log on.

Information

Earliest/Latest Logon

These fields allow you to specify the earliest and latest times the operator can log on to the system. This facility acts as an extra level of security, to prevent this account being used at times when you know the authorised operator does not need it. For example, you may know that the operator only requires access to the system in afternoons, in which case you could set the earliest logon time 12.00 noon to make sure that nobody else uses this account in the morning.

Session Logging

This field is no longer used.

Maximum Dormancy

Enter the maximum number of days that the operator's details are allowed to remain on the system without being accessed. After this time has elapsed, the operator cannot logon using this name and password; their details must be re-enabled by their supervisor.

Start Date

The start date of the operator.

Operator Disabled

Displays Y when the operator has had their access disabled for any reason. Only operators with a supervisor profile can access this field. Only operators with a supervisor profile can disable an operator, or clear the field to reset the operator's access.

Last Used

Depending on the circumstances, this field displays either the last time that the operator logged on, or the time that the supervisor re-enabled a previously disabled operator.

MFA Enabled

Displays Y when the operator has registered their multi-factor authentication (MFA) access. Enter N to reset MFA for the operator to register again. This is used if the operator has lost their MFA device.

Obsolete Date

Enter the date on which this operator becomes obsolete.

MFA Override

Enter Y to override all MFA security settings for this operator and allow them to log in directly to ResourceLink with only a username and password, even if MFA is configured as mandatory in your ResourceLink system.

If your organisation has implemented single-sign on (SSO) to include ResourceLink, this field has no effect if the operator completes MFA as part of the initial SSO login for their current session. However, if an operator has the Allow SSO Bypass field set to Y and logs in directly to ResourceLink with a username and password, this field will have an effect.

ⓘ  We recommend that you have at least one ResourceLink system administrator set up with both Allow SSO Bypass and MFA Override enabled. This would help to mitigate disruption in the unlikely event that your Azure Active Directory application were to be unavailable to all ResourceLink operators within your organisation.

Batch Prefix

If applicable, enter a prefix for default timesheet batch IDs. If you enter a prefix, it is added to the ID of all timesheet batches created by the selected operator via Copy Default Timesheets. This enables the operator who created the batches to be identified.

Allow SSO Bypass

This field is only displayed with a valid SSOAZURE licence key.

Enter Y to allow this operator to log in to ResourceLink directly with their username and password, without having to first go through SSO. This also bypasses any MFA that is set up as part of your SSO. This setting is useful, for example, if you have contractors accessing your ResourceLink system who do not have user profiles within your Azure Active Directory, and therefore do not come within SSO.

Once mandatory MFA is configured in your ResourceLink system, any operator that logs in to ResourceLink with Allow SSO Bypass enabled will also have to use MFA in addition to their username and password. The only exception is where the MFA Override field is set to Y in this window.

ⓘ  We recommend that you have at least one ResourceLink system administrator set up with both Allow SSO Bypass and MFA Override enabled. This would help to mitigate disruption in the unlikely event that your Azure Active Directory application were to be unavailable to all ResourceLink operators within your organisation.

Other

Access Flag

Enter Y to allow the operator to access their own employee records and operator file, or enter N to prevent access.

Access Discipline

Enter Y to allow the operator to access their own disciplinary records, or enter N to prevent access.

Access Grievance

Enter Y to allow the operator to access their own grievance records, or enter N to prevent access.

ⓘ  If you enter N in any of the above three fields, you must also enter the operator’s employee number in the Employee Number field to prevent access to the operator's own details.

Auth/Acpt Logon Warn

Enter Y to display a warning when the operator logs on, that advises them of outstanding items requiring authorisation and/or acceptance, or enter N to suppress it. For more information, see Pay Element Authorisation and Acceptance.

Auth User Grp

Enter the code for the user group that authorises the operator's pay element entries, or click WINDOW. It is essential that you enter a user group, otherwise if you leave this field blank the operator will not be able to do anything on the pay elements screen.

Navigation Panel

Password

Click this button to display Password Detail, where you can set up password details for the operator.

Email Address

Click this button to display Maintain Email Address, where you can maintain email address details for this person. A name and address entered in this window becomes available for selection in Email and Email Message Templates.

Notes

Click this button to display Maintain Note Detail, where you can enter any notes or comments you want to record.

Security IDs

Click this button to display Maintain Operator Profile Security ID, where you can maintain the security IDs associated with the operator.

ⓘ  An operator inherits the security ID from their profile. Therefore, you only need to enter a security ID against an operator if the operator requires a different security ID.

Additional Dets

Click this button to display Operator Additional Details, where you can maintain other operator specific details including the date format.

Language

This button is only displayed if the multi-lingual functionality is switched on. Click this button to display Operator Default Language, where you can select the default language applicable to the selected operator.

Recruitment

Click this button to display Operator Recruitment Details, where you can configure the Recruitment module user profile to be used for this operator.

MD94S1