Actor Organization Unit security for HR Talent Administration
The ActorOrgUnitHRAdmin_ST
and
ActorOrgUnitAccessLevelHRAdmin_ST
roles can be used to access and manage
employee data by organization unit in HR Talent. This role ensures
that access to employee-related data is limited.
ActorOrgUnit security access only gives access to employees who have organization units on their work assignments that match the organization units that are assigned to the actor in ActorOrgUnit. Actors in this role can access and manage employee-related data in the module without seeing employee data outside of their organization unit access. ActorOrgUnit security is enforced on employee lists and actions that process employee data.
- If the
ActorOrgUnitHRAdmin_ST
orActorOrgUnitAccessLevelHRAdmin_ST
role is assigned to an actor, theEmployee_ST
role is no longer valid for that actor. It must be replaced withActorOrgUnitEmployee_ST
. - Use the
Employee_ST
role for employees who do not have an ActorOrgUnit role assigned to them. - When multiple roles are assigned to an actor, the security rules with the least restrictive access are applied.
- Existing process flows can be modified to accommodate the ActorOrg users. See KB3534291.