Enables you to maintain security profiles, where you can specify the access rights available to the various types of operator who use the system.

For example, typical profiles that you need are for system administrators, managers and clerks.

Manager profiles are likely to allow access to all of the tasks and menus that the operator and the staff in their department need. You may also want managers to be able to maintain certain details held on the system about their staff, such as their training or attainment record. You can enable managers to maintain staff details by allowing them access to their department's structure unit within the appropriate hierarchy but not to the entire hierarchy. Restricting access only to their department’s structure unit means that they could update records for their own staff, but not for staff in other departments.

Clerk profiles are likely to allow access only to the specific tasks and menus they need to carry out their job.

To access this window, enter fast path HRPROFILE.

Selection

Profile

Enter the ID of the profile that you want to maintain, or select one by clicking WINDOW to display Select Profile.

If the profile does not exist, a prompt is displayed allowing you to create the new profile. If you choose to create the new profile, Add/Copy Profile is displayed where you can copy an existing profile and amend the details.

Note: New profile IDs cannot contain any punctuation or special characters.

General

Short Description

Enter a short description of the profile.

Supervisor Profile

Select this check box if the profile is a Supervisor type profile. Operators with a supervisor profile have Closedadditional privileges.

Long Description

Enter the long description of the profile.

Start Date

Enter the date from which the profile is effective.

Obsolete Date

Enter the date on which this security profile becomes obsolete.

Logon Menu

Enter the first menu displayed when the user logs on or select one by clicking window to display Select Menu.

Note: Usually you would select the main menu, however, there may be circumstances when a different menu is required. For example, you may want the first menu displayed to payroll clerks to be the one containing the payroll functions they require.

Onboarding Profile

Select this check box to indicate that the Security Profile is available to be used by Onboarders. This will also restrict the modules, processes and widgets that can be associated with the profile to those available for Onboarding.

Security

Hierarchy

If you want to restrict employee information that can be maintained to individuals in a particular part of the organisation, that is, contained within a part or all of a specific hierarchy, enter the name of the hierarchy or select one by clicking WINDOW to display Hierarchy Selection. If no hierarchy is specified, open access is given to employees in all structure units in all hierarchies.

Grade Security Level

You can allocate a grade security level between 1 and 10 to the profile. This is used in conjunction with the level number allocated to a grade. It controls a profile user's access to the data of employees of certain grades. The system prevents profile users accessing the data of employees whose grade has a higher security level than their profile security level. The following table illustrates the effect of different combinations of profile and grade security levels.

Profile Security Level Employee Grade/Job Security Level Access to Employee Data?
4 5 N
4 4 N
4 3 Y
- 5 Y
5 - Y

Note: These restrictions only apply to an employee's main post, unless the Post Security Access Type field in Static Level Security Fields is set to A.

Job Security Level

You can allocate a job security level between 1 and 10 to the profile. This is used in conjunction with the level number allocated to a job. It controls a profile user's access to the data of employees holding certain jobs. The system prevents profile users accessing the data of employees whose job has a higher security level than their profile security level. The above table illustrates the effect of different combinations of profile and job security levels.

Note: These restrictions only apply to an employee's main post, unless the Post Security Access Type field in Static Level Security Fields is set to A.

Grade List

Specify grade lists for the profile, which restricts operators who have this profile to maintaining data for employees holding certain grades only. The Grade List field is used in conjunction with the Inclusive? field. If no grade lists are specified, operators are able to maintain data linked to all grades. Click WINDOW to select a grade list in Objects List Display.

Inclusive?

This field is only applicable if grade lists have been specified in the Grade List field. Enter Y for inclusive grade data maintenance where the operator can only maintain grades specified or enter N for exclusive grade data maintenance where the operator can maintain all grades except the specified grades.

Employee List

Specify employee lists for the profile, which restricts operators who have this profile to maintaining data for certain employees only. The Employee List field is used in conjunction with the Inclusive? field. If no employee lists are specified, operators are able to maintain data linked to all employees. Click WINDOW to select an employee list in Objects List Display.

Inclusive?

This field is only applicable if employee lists have been specified in the Employee List field. Enter Y for inclusive employee data maintenance where the operator can only maintain employees specified or enter N for exclusive employee data maintenance where the operator can maintain all employees except the specified employees.

Notes Authority

Controls access to Notes windows. You can specify whether users are allowed to add, change or delete notes. Enter U to allow users to add and change notes, V to allow users to view notes only or N to prevent users from viewing notes.

Modify Help

Enter Y to allow users to add, change or delete the help text accessed from the 'Help' option on the Display menu.

Manager Flag

Enter Y to assign manager status to the user's profile. This enables a manager to access the Inhibit Status fields, which control the ability of other users to include or remove employees from a current pay cycle.

Access Via Payroll?

Employees are linked to structure units in a hierarchy via their pay group (payroll link) or their post. When you select an employee for processing, the system checks for the existence of their employee record in the hierarchy. Enter Y if employees are linked to the hierarchy via the payroll link.

Report Sec

Determines the access privileges of users to ResourceLink employee data via their report generator. Enter Y to allow users to access the same employee data via their report generator as their profile allows within ResourceLink or enter N to prevent users linked to the profile from accessing any ResourceLink employee data via their report generator.

Post Access

Enter one of the following to specify the level of access this profile has to employee's posts, which in turn determines the access to employee's data:

The default for this field is specified in the Post Security Access Type field in Static Level Security Fields in System Control.

Note: If greater security is required when using post access to employee data, specify screen MD47S37 instead of MD47S7 in the user's profile. If this is done, only those posts to which the user has access are displayed.

Portal

Start Page/Module/ Group

This option is only relevant if you are using MyView without the dashboard. Enter the ID of the start page / module / process group that you want displayed when MyView is first accessed by an employee with this security profile, or select one from the drop-down list.

Other

Confirmation

Enter the type of confirmation required when an operator with this security profile exits from a screen by clicking the COMMIT or CANCEL button, or select one from the drop-down list.

Note: The default setting for confirmation windows can be specified in the Transaction Confirmation field in User Level System Fields.

Buttons

Menus

Click this button to display Maintain Profile Menus, where you can maintain a list of menus to which this security profile has access.

Diary Access

Click this button to display Diary Access Maintenance, where you can set up diary access.

Structure Units

Click this button to display Parent, where you can select the structure units a profile-holder can access if you specified a hierarchy in the Hierarchy field.

Tasks

Click this button to display Maintain Profile Tasks, where you can maintain a list of tasks to which this security profile has access.

Security IDs

Click this button to display Maintain Operator Profile Security ID, where you can maintain the security IDs associated with the profile.

User Groups

Click this button to display Security Profile User Groups, where you can maintain the user groups linked to the profile. Operators in user groups linked to the profile are allowed to perform specific activities targeted to the user groups - for example, authorising pay element changes, processing generated diary events.

MyView

Click this button to display MyView Access, where you can configure access to MyView for this security profile.

Reporting

Click this button to display Reporting, where you can configure access to the reporting options for this security profile.

Restrictions

Click this button to display Profile Restrictions Maintenance, where you can maintain permitted actions, and restrict access to certain screens.

Web View

Click this button to display Web View Configuration, where you can configure access to the Web View module for this security profile.

Emp Checks

Click this button to display Employment Checks Access, where you can maintain a list of employment check types and levels to which this security profile has access.

Member Security

This button is only available if the Pensions module is licensed. Click this button to display Member List Access Maintenance, where you can permit or deny access to members included in selected member lists for the security profile.

T&A Security

Click this button to display T&A Security, where you can configure the access rights in the Time and Attendance module for this security profile.

Recruitment

Click this button to display Operator Recruitment Structure Units, where you can configure which structure units the security profile has access to in the Recruitment module.

MD95S1A