HR custom roles

This section describes the custom roles that the Road Rager security administrator needed to create in order to implement security for the HR product suite.

The roles in this section are simplified for ease of understanding. Typically, a Lawson customer would use more forms than this section describes.

Name of custom role Gives access to
HRMgrRR

This role includes classes to open up all HR forms and data that Road Rager uses. For purposes of the example in this section of the document, the role gives access to:

  • Data source: Application product line

  • Form: HR11 all access (view and update employee data)

  • Forms: PA52.1 through PA52.5 all access (process personnel actions such as promotions, pay changes, department or supervisor changes)

  • Report: HR211 all access. (This report provides data on all employees, including executives.)

  • Files (tables), drills, and selects associated with these programs.

  • System codes: HR, PA and any system codes needed for related files

The role does not limit the HR manager to a particular process level so the manager can perform all these actions for both Biloxi and Brownsville employees.

Notice the name of this role. "RR" is appended to it to ensure that this role name does not conflict with a Lawson-delivered role.
HRProcessor

Same as HRManager but no access to the HR211 report.

Road Rager wants only the HRManager role to have any access to executive compensation data.
HRGeneralistBiloxi

This role provides the following access in Biloxi only:

  • HR11 all access, except for the Social Security number field which is accessed denied and the Pay tab which is also access denied.

  • PA52.1 and PA52.2: Inquire, Previous and Next access only. This user cannot update these forms.

    You might recall from Road Rager's AP implementation that granting access to Previous and Next with Inquires ensures that the user can view all data he or she should see even if it scrolls across multiple screenloads.

  • Files (tables) associated with the programs and with objects, for example, drills and selects, associated with these programs.
HRGeneralistBrown This role provides identical access rights as HRGeneralistBiloxi but is instead limited to employee data in Brownsville.