In SAP SuccessFactors, the concept of Roles can be understood in different manners depending on where they are used in the application:
- Standard Roles exist to define the relationship between users: This is coming from the employee data.
- Roles are used to manage security with Role-Based Permissions: Role-Based Permissions (RBP) is a system used to maintain one of the security layers in the system. This dynamic method of assigning permissions uses Permission Groups and Permission Roles. For example, when an employee is promoted to a manager, the change is made in the user data (either imported or manually). The employee would automatically be assigned all the special permissions a manager should have. There is a complete audit history of all changes made to a group or role. Role-Based Permissions are designed so that users will match more than one role.
As a best practice, we recommend configuring roles by starting with the most generic role, as in All Employees Role, and casting the net as wide as possible to include all the permissions given to everyone.
- Job Roles in Job Families are used for competency mapping: In SAP SuccessFactors, competencies can be mapped to specific job roles and grouped into job families. Job roles describe the different job types included in a job family.