Using Staff Access Groups

By default, you may work with all staff in the organizational units where you are granted permissions. A staff access group is a security method to restrict access to specific staff. Use these groups to restrict staff access to certain staff levels or specific staff in the firm. Access to staff can be secured for all products or for specific product modules.

Staff are assigned to staff access groups in one of two categories:

• Secured staff. These are the staff whose information is secured. Information about secured staff is only available to the staff with access. Secured staff information is not visible in specified product areas to anyone who is not listed as a staff with access. This can be used to safeguard confidential or sensitive staff assignments and projects.
• Staff with access. These are the staff who have access to the staff secured in the staff access group. Only staff assigned as staff with access have rights to work with secured staff, regardless of any rights they have through their assignments to organizational units.

Refer to Assigning Access to Staff Access Groups for more information on securing staff in staff access groups.

If you need to create an access group similar to an existing access group, you can create a group by copying an existing group.

Securing Staff in Multiple Staff Access Groups

Staff can be selected for security in multiple staff access groups. You might assign staff in multiple staff access groups to assign a unique set of staff with access in differing product modules.

When selected in multiple access groups, staff are secured in all product modules that are selected in those groups. For example, if a staff is secured for Administration Manager in one staff access group and for Tax in a second staff access group, that staff is secured from staff without access in all Administration Manager and Tax product modules.

Staff who should have access to other staff do not need to be assigned in all staff access groups where those staff are secured. An assigned staff will have access to secured staff for any product area selected in the access group. For example, if a staff is secured in Workstream in multiple staff access groups, a staff need only be assigned in one group to access the staff in Workstream. In this example, the staff would retain access to the secured staff in Workstream even if the staff is secured in any other access group where the staff is not assigned access.