Security Permissions
Contents
Security Permissions
- After logging into the Subscribe-HR HCM Platform. Select the Maintenance option from the main navigation menu on the left.
- Select Groups
- Either Create a New Group by selecting the Create New button. Or
- Select the Group that you want to amend / adjust.
- Select Permissions from the navigation menu.
- You will be presented with a set of tabs, These Tabs are: Solutions: Objects: Fields: Tools: Dashboard:
Solutions
The solutions tab houses the option for you to quickly and easily enable/disable access to whole solutions e.g. Human Resources by simply ticking the checkbox next to the name of the solution you wish to grant access too, and unticking the one you wish to revoke access too then press Save.
Note: Removing access to a certain solution will make it disappear from the navigation menu of the user in the group you edited and can only be viewed if the check box is re-ticked.
Objects
The objects tab allows you to drill further down and revoke access to specific parts/objects of solutions. To do so:
- Select Solution Name. From the drop down menu select which solution you would like to edit the permissions on.
- Review the objects presented and choose whether that group can View, Create, Update, or Delete.
- Click the Save button.
- View: Ticking/unticking this checkbox will determine whether this object will appear in the users system.
- Create: Ticking this check box will allow the user to create new records within this object.
- Update: Ticking this checkbox will allow the user to edit existing records within the object.
- Delete: Ticking this checkbox will allow users to delete existing records within the object.
Fields
The Fields tab goes further and focuses on the specific fields within objects, to edit these permissions:
- Select Object. From the drop down menu select which object you would like to edit the permissions on.
- Review the Fields presented and choose whether that group can View, and/or Edit.
- Click the Save button.
- View: Ticking/unticking this checkbox will determine whether this field will appear in the users system.
- Update: Ticking this checkbox will allow the user to edit existing the specific field within the object.
Tools / Widgets / Wizards / Workbench
This area will allow for workbench and tools to be managed based on Security access. Employees, Managers and HR staff can only access areas which relate to them. Access is based on permissions as well as actions that need to be performed. If you do not wish users within this group to have access to workbench items, leave Can Access [Workbench Name] unticked.
Please note that additional Widgets, Wizards, Workbench Items, will be available in your system, with logical "Permission" options that you can select relating to "Permission" set-up.
Widget - Tasks and Notifications
- Select, Can access Tasks and Notifications, if you want the User Group, to be able to access the Widget.
Wizard - New Quick Task
Workbench - Canvases
There are 3 tabs within the Canvas Workbench, these include:
- My Canvases. This tab that houses all a users specific Surveys/Forms that have been received/responded too. If you are a manager or in HR, these canvases will also be available in All Canvases Note: This is always viewable by all that have access to workbench canvases
- All Canvases. This is where users are able to see all the canvases that they have permission to view. e.g. Managers will be able to see their canvases and the employees they manage, whereas HR Staff will have access to all canvases for all employees.
- Sent Canvases. This is where users are able to view all the canvases they have deployed.
To allow access to All canvases:
- Tick the Can Access All Canvases Tab
- Select whether the user will be able to Open Canvases, View the results of completed canvases, Resend or Delete already deployed canvases by ticking the Selection box next to the corresponding line item.
- Click the Save button
To allow access to Deployments:
- Tick the Can Access Deployments Tab
- Select whether the user will be able to Create New Deployments, Cancel or Delete already deployed canvases by ticking the Selection box next to the corresponding line item.
- Click the Save button.
Workbench - Performance
There are 3 tabs within the Performance Workbench, these include:
- My Performance. This tab houses all a users specific performance reviews that have been received/responded too. If you are a manager or in HR, these reviews will also be available in My Team's Performance or All Performance Note: This is always viewable by all that have access to workbench performance
- My Team's Performance. This tab shows reviews that manager or peer has access to and need to be part of.
- All Canvases. Administrative area where users can see all performance review records, current and completed.
- Deployments. This area shows history of deployed performance reviews.
To allow access to My Team's Performance:
- Tick the Can Access My Team's Performance Tab
- Select whether the user will be able to Open Performance, View the results of completed reviews, Adjust due dates, Reopen steps or Delete performance reviews by ticking the Selection box next to the corresponding line item.
- Click the Save button
To allow access to All performance:
- Tick the Can Access All Performance Tab
- Select whether the user will be able to Open Performance, View the results of completed reviews, Adjust due dates, Reopen steps or Delete performance reviews by ticking the Selection box next to the corresponding line item.
- Click the Save button
To allow access to Deployments:
- Tick the Can Access Deployments Tab
- Select whether the user will be able to Create New Deployments or Cancel already created ones by ticking the Selection box next to the corresponding line item.
- Click the Save button.
Standard Dashboard (Non-Team Dashboard)
Standard Dashboard "SECURITY PERMISSIONS" allow you to define what panels are visible on the dashboard for various user groups through the use of the 11 defined Security Groups. Each security group in use will need to be modified.
.
Example: You may want the Employee Self Service user group to only be able to view:
- Employee Info
- Quick Links
- Leave Balances
And want the Line-Manager Self Service user group to be able to see:
- Teams Records
- Teams OH&S Records
- Teams Training Records
Locating and Editing the Standard Dashboard Security Permissions
- Select the Dashboard Tab.
- Select the options you wish to add e.g. Payslips, Employee Info. Ticking the Allow Access box will allow that specific function.
- Select the [Save] button.
The Dashboard will reflect what has been selected in the security permissions.
Each check box corresponds to an option. Example: Leave Balances, Quicklinks, Payslips etc
The payslip widget "Box" is only relevant if you are utilising an integration which allows Payslips to be imported into Subscribe-HR.
Other Tools
Tools in this tab include but are not limited to Reports, inbox, and leave planner, and allows the following custom permissions to be set:
- View: Ticking/Unticking this box will determine whether the tool appears in the users system.
- Create: Ticking this box will allow a user to create new records. In this case, create new reports
- Delete: Ticking this box will allow users the ability to delete existing records. In this case, delete existing reports.
- Delete Messages
- Access: Ticking/Unticking this box will determine whether the user will be allowed to enter the area or function.
- All Employees: Ticking this box will allow the absence of all employees to be visible to the user.
- Hide Absence: Ticking this box will hide the absence records from the users view.
To edit these permissions:
- Select the Other Tools tab.
- check the boxes you wish to grant access too.
- Click the Save button