The work structures you can name in security profiles are:
For example, suppose you build this Sales Organization hierarchy:
You can create a security profile that permits access to employee records throughout the sales organization. This profile references the Sales Organization hierarchy. It names the Sales Department as the highest organization in the hierarchy through which profile holders have access to employee records.
Next, you want the directors of the two sales regions to have access to all employee records in their region only. You create Eastern and Western Sales Director security profiles. These profiles also reference the Sales hierarchy. But, they name the Eastern and Western Regions, respectively, as the top organizations for these profiles' access to employee records.
When you name an organization as the top organization, you specify whether it is inclusive or not. You must include the top organization if you want holders of the profile to access records of people assigned to the top organization.
Suppose, for example, within the Sales Department, you want to give the Sales Research Director access to her subordinates' records only. You can start by building the following Sales Positions Hierarchy:
Now you create the Sales Research Director security profile. This profile references the Sales Positions hierarchy and names the Sales Research Director as the top position for access to employee records.
|Security Profile:||SALES RESEARCH DIRECTOR|
|Organization Hierarchy:||Sales Organization|
|Top Organization:||Sales Department|
|Position Hierarchy:||Sales Positions|
|Top Position:||Sales Research Director|
|Include Top Position:||Yes|
Controlling security by payroll assignment limits the employee records users can see and update on employee-related windows, such as those for employee information, and element entry.
Of course, if an employee assignment does not include a payroll, payroll security cannot apply to this assignment. Payroll security never applies to applicant records since applicants are not assigned to payrolls.
The windows for compensation definition are unrelated to any particular employee records or payroll assignments. Therefore limiting access by payroll does not affect users' access to these windows.