Actor Organization Unit security

The ActorOrgUnit role can be used to access and manage employee data by organization unit for several modules in HR Talent. This role ensures that access to employee-related data is limited.

ActorOrgUnit security access only gives access to employees who have organization units on their work assignments that match the organization units that are assigned to the actor in ActorOrgUnit. Actors in this role can access and manage employee-related data in the module without seeing employee data outside of their organization unit access. ActorOrgUnit security is enforced on employee lists and actions that process employee data.

• If an ActorOrgUnit Administrator role is assigned to an actor, the Employee_ST role is no longer valid for that actor. It must be replaced with ActorOrgUnitEmployee_ST.
• Use the Employee_ST role for employees who do not have an ActorOrgUnit role assigned to them.
• When multiple roles are assigned to an actor, the security rules with the least restrictive access are applied.
• The ActorOrgUnit roles are based on existing roles.

Existing Roles	ActorOrgUnit Roles
AbsenceAdmin_ST	ActorOrgUnitAbsenceAdmin_ST
BenefitAdministrator_ST	ActorOrgUnitBenefitAdministrator_ST
CompensationAnalyst_ST	ActorOrgUnitCompensationAnalyst_ST
PayrollAdministrator_ST	ActorOrgUnitPayrollAdministrator_ST
HRGeneralistEmp_ST	ActorOrgUnitEmployee_ST
HRGeneralistActorOrgUnit_ST	ActorOrgUnitHRAdmin_ST
HRGeneralistActorOrgUnitAccessLevel_ST	ActorOrgUnitAccessLevelHRAdmin_ST

• Reports
  • Some reporting is the responsibility of the module administrator roles. For example, regulatory reporting. These reports are not accessible to the new ActorOrgUnit roles.
  • Reports using Landmark Cube Reporting are only accessible by delivered module administrative roles. They will become available to the new ActorOrgUnit roles in a future release.
  • The COL_SECURITY_ST replication set supports replicating ActorOrgUnit records for reports that are using columnar replication.
• Process flows can be modified to accommodate channeling the flow to the ActorOrg users. See KB3534291.