Differentiating between proxy rights and delegate permission

Proxies are useful in verifying configuration and permissions in Employee Central. Use proxy access to quickly test how the system behaves for different users and roles without manually logging in and out of different user accounts. There are typically two roles in a proxy:

1. The account holder owns the account and has the right to view and edit information.
2. The Proxy can act on behalf of the account holder. With proxy rights you can use Proxy Now to open, view, edit, or send any item in the solutions for which the user has permission.

An additional setting is available for Employee Central and Employee Profile data. When Private Data For Proxy Account Holder is deselected, the proxy doesn't have access to potentially sensitive information, such as home address or compensation.

Proxy assignments can be restricted to a specified period. You can add a start date, an end date, or both. The assigned proxy can only access the target user account during the specified time range. A time range can be set for new or existing proxy assignments using either Proxy Management or Proxy Import.

The Help & Resources section in Admin Center provides you with further information about proxies and proxy management.

To create proxy assignments, complete the following steps:

1. Navigate to Proxy Management.
2. To find and select the proxy and the account holder use the Grant Proxy section search boxes
3. To select specific system areas the proxy can access, use checkboxes in the Grant Proxy Rights section .
4. Optional: Set a time range for the proxy assignment. Select start date and time, end date and time, or both.
5. Choose Save.

Proxies inherit the account holder's permission during the proxy assignment. In contrast, delegates require the employee-delegate relationship to be established first and permission roles to be defined before delegates can perform any actions on behalf of the account holder.

You can assign up to two delegates for each employee. Assign the two delegates separate tasks or permissions to cover different functional or regional areas. Depending on the target population defined in the RBP role, delegate users will have access to direct and indirect reports of the account holder.

To configure the delegates:

1. Navigate to the Picklist Center.
2. Edit the picklist jobRelType.
3. Add the picklist-values indicated in the table.

   External Code (case and space sensitive)	Relationship Name
   delegate 1	Delegate A
   delegate 2	Delegate B

   Note

   When you define the External Code and the Nonunique External Code of the picklist, make sure there is a space between the word and the number, that is, "delegate 1" / "delegate 2".
   
4. Identify the delegates in the Job Relationships block. You can do this manually or by import.
5. Create a new permission role for Delegate A and B users. Select either Delegate A or B to assign permission and select the appropriate target population. Save the role and test the permission.