Unlocking Access to Garnishment Data
Purpose: This guide outlines what page access is restricted to only those key individuals granted maintenance access to garnishment data. While those who have the responsibility of processing payroll may have access to the pages or components where garnishment data is stored, they will not be able to view the tab or section of garnishment data without explicit access being granted.
Audience: Local Security Administrators and HR/Payroll Staff
Employee garnishment information is highly sensitive personal and financial data and should be accessible only to individuals with a legitimate business need to process and manage the associated payroll deductions.
Although multiple employees may have responsibilities for payroll processing, that does not mean they need visibility into an individual's private financial circumstances.
Garnishments can carry significant personal and social implications, making confidentiality particularly important. Restricting access to the one or two individuals who must administer these deductions is a deliberate data privacy and security measure that upholds the principle of least privilege, protects employee dignity, and ensures sensitive information is not unnecessarily exposed to others within the organization.
Staff who have access to pages that contain some garnishment date in addition to other content will retain access to the page itself; however, the garnishment tab or section will be inaccessible unless they are ALSO assigned one of the additional garnishment security roles. These roles effectively “unlock” the garnishment content, allowing authorized users to view and interact with the garnishment data. Pages that are specifically design for garnishment data alone were removed from the existing roles and are no longer visible without the addition of one of the new garnishment roles.
Be mindful that someone with Add/Update or Correct History access to the payroll pages would be granted the same level of privilege in their garnishment role. Because of the way the tab and section controls work, it is not possible to grant someone with edit access to the page view only access to only the garnishment data. If they have view only access to the payroll processing page, then view only access to garnishment data will work as expected since the access authority is controlled at the page/component level.
The roles related to viewing garnishment data are as follows:
- ZD Garnishment Inquiry - View Only Access [ONLY pairs with ZD primary role]
- ZC Garnishment Data - Correct History Access
- ZZ Garnishment Data - Add/Update Access
Navigation: Main Menu>Payroll for North America>Employee Pay Data USA>Deductions>Create Garnishments
The page will not be visible to a user without the assignment of one of the garnishment roles listed above being assigned to their User Profile.
Payroll Processing Security Roles where Garnishment Data Has Been Locked:
ONLY the ZZ Garnishment Data and ZC Garnishment Data security roles will grant access to this garnishment page. The following security roles no longer grant access to create garnishments:
- ZC Payroll Data Maintenance
- ZD Payroll Data Maintenance [Pairs with ZD Garnishment Inquiry role]
- ZZ Payroll Data Maintenance
- ZZ Payroll Processing
- ZZ SS Payroll
Local Security Administrators must assign one of the garnishment roles to "unlock" access to this page.
Note: This page access is exclusively granted with the set of garnishment roles. Granting the ZD Garnishment Inquiry role in this case, will allow access to the page as View Only regardless of any other roles the user has.
Navigation: Main Menu>Payroll for North America>Employee Pay Data USA>Deductions>Review Garnishments
The page will not be visible on the menu for a user without the assignment of one of the garnishment roles listed above being assigned to their User Profile.
To Verify Garnishment Data Does Not Appear:
Navigate to this page using one of these existing security roles that used to grant access to garnishment data, but no longer does.
You should NOT see this page as access should be blocked.
- ZZ Payroll Processing
- ZZ SS Payroll
Next the LSA assigns one of the new garnishment roles shown at the top of this guide to "unlock" access to this page. Navigate to this page again, where the data is now visible without masking.
Warning: Applying the ZD Garnishment Inquiry role over any ZC or ZZ role will NOT prevent user from Add/Update access.
Navigation: Main Menu>Payroll for North America>Payroll Processing USA>Produce Payroll>Review Paycheck
The section will not be visible to a user without the assignment of one of the garnishment roles listed above being assigned to their User Profile.
To Verify Garnishment Data Does Not Appear:
Navigate to this page using one of these existing security roles that used to grant access to garnishment data, but no longer does.
You should NOT see this page, as access should be blocked.
- ZZ Payroll Processing
- ZD Benefits Employee Data Inq [Pairs with ZD Garnishment Inquiry role]
- ZD Payroll Inquiry
Next the LSA assigns one of the new garnishment roles shown at the top of this guide to "unlock" access to this page. Navigate to this page again, where the data is now visible without masking.
Warning: Applying the Inquiry Inquiry role over any ZC or ZZ role will NOT prevent user from Add/Update access. This is a view only page, so no add/update activity is possible on this page.
Navigation: Main Menu>Payroll for North America>Payroll Processing USA>Update Paysheets>By Payline Security
The tab will not be visible to a user without the assignment of one of the garnishment roles listed above being assigned to their User Profile.
To Verify Garnishment Data Does Not Appear:
Navigate to this page (tab) using one of these existing security roles that used to grant access to garnishment data, but no longer does.
You should NOT see this tab, but should see the rest of the tabs that are not garnishment related, as access to only the garnishment data should be blocked.
- ZD Payroll Data Maintenance [Pairs with ZD Garnishment Inquiry role]
- ZZ Payroll Data Maintenance
- ZC Payroll Data Maintenance
- ZD Payroll Inquiry [Pairs with ZD Garnishment Data role]
Next the LSA assigns one of the new garnishment roles shown at the top of this guide to "unlock" access to this page. Navigate to this page again, where the data is now visible without masking.
Warning: Applying the ZD Garnishment Inquiry role over any ZC or ZZ role will NOT prevent user from Add/Update access.
Navigation: Main Menu>Payroll for North America>Payroll Processing USA>Update Paysheets>By Paysheet
The tab will not be visible to a user without the assignment of one of the garnishment roles listed above being assigned to their User Profile.
To Verify Garnishment Data Does Not Appear:
Navigate to this page using one of these existing security roles that used to grant access to garnishment data, but no longer does.
You should NOT see this page as access should be blocked.
- ZC Payroll Data Maintenance
- ZD Payroll Data Maintenance [Pairs with ZD Garnishment Inquiry role]
- ZZ Payroll Data Maintenance
- ZZ Payroll Processing
Next the LSA assigns one of the new garnishment roles shown at the top of this guide to "unlock" access to this page. Navigate to this page again, where the data is now visible without masking.
Warning: Applying the ZD Garnishment Inquiry role over any ZC or ZZ role will NOT prevent user from Add/Update access.
Navigation: Main Menu>Payroll for North America>Periodic Payroll Events USA>Balance Adjustments>Garnishments
The page will not be visible to a user without the assignment of one of the garnishment roles listed above being assigned to their User Profile.
To Verify Garnishment Data Does Not Appear:
Navigate to this page using one of these existing security roles that used to grant access to garnishment data, but no longer does.
You should NOT see this page as access should be blocked.
- ZC Payroll Data Maintenance
- ZD Payroll Data Maintenance [Pairs with ZD Garnishment Inquiry role]
- ZZ Payroll Data Maintenance
- ZZ Payroll Processing
- ZZ SS Payroll
Next the LSA assigns one of the new garnishment roles shown at the top of this guide to "unlock" access to this page. Navigate to this page again, where the data is now visible without masking.
Warning: Applying the ZD Garnishment Inquiry role over any ZC or ZZ role will NOT prevent user from Add/Update access.
Navigation: Main Menu>Payroll for North America>Periodic Payroll Events USA>Balance Reviews>Garnishments
The page will not be visible to a user without the assignment of one of the garnishment roles listed above being assigned to their User Profile.
To Verify Garnishment Data Does Not Appear:
Navigate to this page using one of these existing security roles that used to grant access to garnishment data, but no longer does.
You should NOT see this page as access should be blocked.
- ZC Payroll Data Maintenance
- ZD Payroll Data Maintenance [Pairs with ZD Garnishment Inquiry role]
- ZZ Payroll Data Maintenance
- ZD_PY_REVIEW_PAY_BALANCES [Pairs with ZD Garnishment Inquiry role]
- ZZ Payroll Processing
Next the LSA assigns one of the new garnishment roles shown at the top of this guide to "unlock" access to this page. Navigate to this page again, where the data is now visible without masking.
Warning: Applying the ZD Garnishment Inquiry role over any ZC or ZZ role will NOT prevent user from Add/Update access. This is a view only page, so no add/update activity is possible on this page.
0 Comments
Add your comment