Example of HR Group Security

The following illustrate how the HR Group Security works. In the table below, the Group IDs have been given permissions to the appropriate HR module Functions on the Group Definition window.

The following Groups/Subgroup Code combinations have been defined in the Group Control window in HR:

In order to give HRMGR access to see all information, the Group ID is listed but the Group and Subgroup Codes are left empty in the table below. This setting gives access to all Group and Subgroup Code combinations. Anyone in the HRMGR Group ID can see anyone's information within the HR system, which is called global security.

The next Group ID has access to every Group Code except the Cabinet level Group Code. In order to do this, a row had to be created with the Group ID for each Group Code to which access is provided. One will not be created for the CAB group (cabinet level). The Group Security rows would look like those shown below:

Notice that every Group Code in the organization has a row associated with PACLERK except for the CAB group. If a new Group Code is created that this PACLERK will need to access, a row specifying the new Group Code and PACLERK as the Group ID will need to be added to the HR Group Security via Personnel window.

Also, note that none of the Subgroups are identified. This gives PACLERK access to each Group listed and to any Subgroups within those Group Codes. When you identify only the Group Code for a Group that has Subgroups, the Group Description does not appear because the Description is defined on the Group/Subgroup combination in the Group Control window.

Next, the WRKSTDY1 Group ID is to have access to all work-study Groups/Subgroups. The security would look like the table below:

The WRKSTDY1 Group ID has access to the WORK group including the FED and INST subgroups, because there are no subgroups identified on the security row. If another Subgroup were added, such as WORK STATE, the WRKSTUDY1 Group ID would have access to it.

WRKSTDY2 Group ID should only be able to see the Organizational Work-Study Group/Subgroup combination. This security row is set up as seen below:

Finally, EDUDEAN Group ID may be in the system (not necessarily the HR modules but for the system); however, you do not want this ID to be able to see any type of HR rows. In order to do this, there should not be a row with Group ID EDUDEAN on the Groups Security window. This setup will prevent the EDUDEAN from seeing anything in the HR module.

Below are examples of how Group IDs are assigned to Group/Subgroup Codes and how individuals are assigned to the Group IDs.