NEW Roles to Unlock Garnishment Data Access
Purpose: As part of the Work Package #4 - Masking of Category 4 Data the ctcLink Security Support Team researched how to activate delivered masking, provided by Oracle. By updating the implementation settings the team was able to turn on delivered masking and prevent the viewing of highly sensitive data on those pages, unless a specific security role is granted enabling the viewing of this sensitive data.
Audience: HCM Support Team performing Functional Testing, Local Security Administrators and HR Staff participating in User Acceptance Testing.
During the solution design phase of the HCM Masking project the determination was made to isolate all garnishment garnishment specific pages or page sections to a set of garnishment specific security roles. This practice has a precedence with the page segregation done for accessibility data.
This will result in all garnishment page content being removed from the roles that grant access to the pages containing garnishment data, thus staff who have access to these pages will not have that page access removed or the garnishment data masked. Instead, those who need to view and interact with garnishment data will simply need one of the additional garnishment security roles added to 'unlock' the garnishment data for viewing.
The roles related to viewing garnishment data are as follows:
- ZD Garnishment Inquiry - View Only Access
- ZC Garnishment Data - Correct History Access
- ZZ Garnishment Data - Add/Update Access
Create Garnishments
Navigation: Main Menu>Payroll for North America>Employee Pay Data USA>Deductions>Create Garnishments
The page will not be visible to a user without the assignment of one of the garnishment roles listed above being assigned to the user.
To Verify Garnishment Data Does Not Appear:
Navigate to this page using one of these existing security roles that used to grant access to garnishment data, but no longer does. You should NOT see this page and should have access blocked.
- ZC Payroll Data Maintenance
- ZD Payroll Data Maintenance
- ZZ Payroll Data Maintenance
- ZZ Payroll Processing
- ZZ SS Payroll
Then assign one of the new garnishment roles shown at the top of this guide to "unlock" access to this page.
Update Paysheet Transactions
Navigation: Main Menu>Payroll for North America>Payroll Processing USA>Create and Load Paysheets>Update Paysheet Transactions
<page displaying error - issue reported to security team>
Review Paycheck
Navigation: Main Menu>Payroll for North America>Payroll Processing USA>Produce Payroll>Review Paycheck
By Payline Security
Navigation: Main Menu>Payroll for North America>Payroll Processing USA>Update Paysheets>By Payline Security
The tab will not be visible to a user without the assignment of one of the garnishment roles listed above being assigned to the user.
By Paysheet
Navigation: Main Menu>Payroll for North America>Payroll Processing USA>Update Paysheets>By Paysheet
The tab will not be visible to a user without the assignment of one of the garnishment roles listed above being assigned to the user.
Garnishments
Navigation: Main Menu>Payroll for North America>Periodic Payroll Events USA>Balance Adjustments>Garnishments
Garnishments
Navigation: Main Menu>Payroll for North America>Periodic Payroll Events USA>Balance Reviews>Garnishments
0 Comments
Add your comment