WP#4 - NEW Roles to Unlock National ID Search Access
Purpose: As part of the Work Package #4 - The pages related to searching for a National ID Number, which includes the Social Security Numbers (SSN) segregated behind a specific security role. This guide is intended to outline how to approach testing this change in access to verify that the prior roles which granted access no longer grant that access and the NEW roles that grant this access in fact grant this access as intended.
Audience: HR Staff participating in User Acceptance Testing who have permission to view SSN.
During the solution design phase of the HCM Masking project, it was determined that all National ID Search pages would be isolated to dedicated National ID Search security roles. This approach follows the precedent established by the page segregation implemented for Accessibility data and Sexual Orientation and Gender Identity (SOGI) data.
As a result, National ID Search content will be removed from the existing roles that provide access to these pages. Staff who previously had access to these search pages will notice that these pages are now inaccessible unless they are assigned to the additional National ID Search security role. This role effectively “unlock” the these pages.
The roles related to viewing garnishment data are as follows:
- ZZ National ID Search - Add/Update Access
The recommended testing approach is:
- First navigate to each page with the security role that previously granted access to National ID Search pages.
- Once it is confirmed that this data is no longer visible, then the Local Security Administrator can add the new National ID Search related security role.
- The tester will then re-visit the pages to confirm that pages are now visible.
Navigation: Main Menu>Payroll for North America>Employee Pay Data USA>Search by National ID
The page will not be visible to a user without the assignment of the National ID Search role listed above being assigned to their User Profile.
To Verify National ID Search Pages Do Not Appear:
Navigate to this page using one of these existing security roles that used to grant access to this page but no longer does. You should NOT see this page as access should be blocked.
- ZC Payroll Data Maintenance
- ZD Payroll Data Maintenance
- ZZ Payroll Data Maintenance
- ZZ Payroll Processing
- ZZ SS Payroll
Next the LSA assigns one of the new National ID Search roles shown at the top of this guide to "unlock" access to this page. Navigate to this page again, where the data is now visible without masking.
Navigation: Main Menu>Workforce Administration>Personal Information>Biographical>Search Person by National ID
The page will not be visible to a user without the assignment of the National ID Search role listed above being assigned to their User Profile.
To Verify National ID Search Pages Do Not Appear:
Navigate to this page using one of these existing security roles that used to grant access to this page, but no longer does. You should NOT see this page as access should be blocked.
- ZC HR Employee Maintenance
- ZD HR Central Config VW
- ZD HR Employee Maintenance VW
- ZD HR Inquiry
- ZZ HR Employee Maintenance
- ZZ SS Workforce Administrator
Next the LSA assigns the National ID Search role shown at the top of this guide to "unlock" access to this page. Navigate to this page again, where the data is now visible without masking.
0 Comments
Add your comment