Assigning Employee Central Role-Based Permissions (RBP)

The role-based permission framework is vast and encompasses permissions for all SAP SuccessFactors solutions. For this course, we'll focus on the common permissions for Employee Central.

Permission Roles control the access permissions in the system and define the overall access to data and application functionality. To create and manage permission roles, complete the following steps:

1. Choose Manage Permission Roles.

2. Use Create to add a new role or use the menu in the Actions column to manage the existing roles.

3. Select next to manage the permissions for the role.

Managers and employees in EC use the following permission categories: Employee Data, Employee Central Effective Dated Entities, and Employee Views. Customers who use custom fields in these categories must also receive permissions for the relevant roles.

In this lesson, we will cover the following permissions:

• Employee Views
• Employee Central Effective-Dated Entities
• Employee Data
• Employee Central Import Entities
• Manage Foundation Object Types
• Manage Foundation Objects
• MDF Foundation Objects

The Employee Views permission defines whether you can see the sections configured in People Profile. This permission is only visible once People Profile has been initially configured during the implementation. Relevant Employee Central sections include:

• Personal Information
• Employment Information
• Total Rewards

The Employee Central Effective-Dated Entities permission grants field-level access for effective-dated elements and fields. These objects can keep track of historical and future changes. This permission is only available when the succession data models have been initially uploaded during implementation. Employee Central comes with standard effective dated elements, such as the following:

• Personal Information (personalInfo)
• Addresses (homeAddress)
• Dependents (personRelationshipInfo)
• Job Information (jobInfo)
• Compensation Information (compInfo)
• Job Relationships (jobRelationsInfo)

There are several layers of permission to consider when you grant permissions to effective-dated blocks. The first layer is the basic understanding of the different field permission types, such as View Current, View History, Edit/Insert, Correct, and Delete.

Additionally, there are permissions for button options when you want to view and edit data. This section will detail the differences between each of the following permission:

1. Block Actions Permissions,
2. Edit (Pencil) Link Permissions,
3. Field Level Permissions

The Edit Link controls whether the Edit (pencil icon) function is available on the block for the users. The only level of access that matters is the Edit/Insert. The rest are ignored.

The permission allows the users to open and edit the block to initiate transactions in People Profile.

You can also perform the edit action from the Actions Menu in People Profile. Just add the Update Employment Records permission as seen on the screenshot.

Field-level permissions control each field’s specific ability to be maintained. Each field can be controlled on its level of visibility and editability.

The permissions for non effective-dated entities are in a separate category, the Employee Data permissions.

Use the interaction below to learn the relevant Employee Data permissions used in Employee Central.

This allows you to perform or restrict imports to Person and Employment objects.

These are admin permissions that define the actions allowed for XML-based corporate data found in Manage Organization, Pay, and Job Structures. This permission is only available when the Corporate Data models have been initially uploaded during implementation.

This enables the admin permissions that set the actions for importing foundation data, translations, and corporate data models.

This sets the admin permissions that define the actions allowed for MDF-based corporate data.

For more information on Role-Based Permissions, refer to the following documents in the SAP Help Portal:

• Implementing Employee Central Core
• Implementing Role-Based Permissions
• Using Role-Based Permissions
• Permission Framework Strategy - Leading Practices for Role Based Permission Framework