Configuring Role-Based Permissions for self-service during implementation

You previously learned about role-based permissions for administrators. In this lesson, you will learn how Employee Central uses RBP to manage Employee Self-Service and Manager Self-Service. Self-Service is built into Employee Central and is not an additional solution.

In the figure, RBP for Employee Self-Service, you can see an example of how this feature works. Employee Self-Service allows employees to initiate and complete transactions without HR tickets. For example, an employee can change their home phone number. RBP typically has three parts. In the figure, the granted population is all employees, the role is the permission to view and edit the phone number, and the target population is themselves.

Typical employee self-service options may include:

• Update marital status or name change
• Update of home address information
• Update of dependents information
• Updated of emergency contact information

Permissions control the level of access a user has over Employee Central blocks. In the figure, Employee Self-Service, Carla Grant can view the Personal Information section of the profile and has edit access to her Address and Personal Information blocks.

Note

Even if an employee has permission to change some of the information, approval could be configured as guardrails.

In this example, we are setting the permission for users to have edit access to the Personal Information block:

1. To ensure the user can see the section where the block is configured, set the relevant People Profile section in the Employee Views first.
2. To see the block, select View Current or View History permission of the Personal Information Actions.
3. To edit the information, select the Edit/Insert of the Edit Link.
4. To edit field information, select the Edit/Insert of the relevant fields.
5. Do the same for any other effective-dated blocks to which you want users to have edit access.

Hint

Avoid giving users the Edit/Insert level permission for the block actions to ensure users cannot bypass workflows when configured. Delete and Correct level permissions are best reserved for select administrators only.

Manager Self-Service allows a manager to initiate transactions for their direct reports. These transactions are typically accompanied by workflows.

Typical manager self-service transactions may include:

• Update employee job information
• Update salary information
• Initiate transfers

The Actions button is the typical starting point for managers. A list of options appears here to initiate transactions for their employees. The manager selects the kind of change that is required and fills in the appropriate fields. In the figure, MSS, you can see examples of typical MSS options. Take Action menu is available in the employee’s profile or quick card.

In this example, we are setting the permission for managers to initiate changes to Job Information for their employees.

1. To ensure the manager can see the section the block is configured, set the relevant People Profile section in the Employee Views first.
2. To see the block, select View Current or View History of the Job Information Actions.
3. To edit the information, select the Edit/Insert of the Edit Link.
4. To edit field information, select the Edit/Insert of the relevant fields.
5. Do the same for any other effective-dated blocks to which you want users to have edit access.
6. To initiate the changes using Take Action, select Edit permission for Update Employment Records in Employee Data, see the figure, MSS permissions.

Hint

Avoid giving managers the Edit/Insert level permission for the block actions to ensure workflows cannot be bypassed when configured. Delete, and Correct level permissions are best reserved for select administrators only.