Differentiating between proxy rights and delegate permission

Proxies are very useful in verifying configuration and permissions in Employee Central. You can use proxy access to quickly test how the system behaves for different users and roles without manually logging in and out of different user accounts. There are typically two roles in a proxy:

• The account holder owns the account and has the right to view and edit information.
• The Proxy can act on behalf of the account holder. The user with proxy rights can use Proxy Now to open, view, edit, or send any item in the solutions for which the user has permission.

An additional setting is available for Employee Central and Employee Profile data. When Private Data For Proxy Account Holder is deselected, the proxy does not have access to potentially sensitive information, such as home address or compensation.

Hint

System administrators control how proxies are assigned and who can assign them. 

Proxy assignments can be restricted to a specified period. You can add a start date, an end date, or both. The assigned proxy can only access the target user account during the specified time range. A time range can be set for new or existing proxy assignments using either Proxy Management or Proxy Import.

The Help & Resources section in Admin Center provides you with further information about proxies and proxy management.

To create proxy assignments, complete the following steps:

1. Navigate to Proxy Management.
2. Use the Grant Proxy section search boxes to find and select the proxy and the account holder.
3. Use checkboxes in the Grant Proxy Rights section to select specific system areas the proxy can access.
4. Optional: Set a time range for the proxy assignment. Select start date and time, end date and time, or both.
5. Choose Save.

You can configure delegates to perform actions on another user’s behalf that affect other employees in your organization.

You can use the relationship roles between Delegate A and Delegate B to assign permissions for up to two individuals for each role, allowing them to act as delegates. The delegate users will have access to direct and indirect reports of the delegator and can perform tasks they have been permitted to perform. You can assign the two delegates separate tasks or permissions to cover different functional or regional areas.

Delegates differ from proxies in that proxies inherit the account holder's permission during the proxy assignment, while delegates only have the explicit permissions assigned through RBP roles.

Note

To use delegates in RBP, you must configure the Delegate relationship type in the Employee Central Job Relationship Picklist. After configuring your delegates, you will see the option to give permissions to this relationship type in your system.

To Configure the Delegate entries in the Job Relationship Type Picklist:

1. Navigate to the Picklist Center.
2. Edit the picklist jobRelType.
3. Add the picklist-values from the following table:

   External Code	Relationship Name
   delegate 1	Delegate A
   delegate 2	Delegate B

   Note

   When you define the External Code and the Non-unique External Code of the picklist, make sure there is a space between the word and the number, that is, "delegate 1" / "delegate 2".
4. Save your changes.

   When you have updated the Job Relationship Type picklist, you can assign permissions to the delegate Permissions. You can define Delegate A and Delegate B in the Grant role to selection of a RBP Role. You can leverage the delegate roles as any other role, such as Manager or HR Manager.