Understanding Row Security Permission Lists

Permission lists, which are created with PeopleTools and assigned to user profiles, define user sign-on times, page access, PeopleTools access, and a variety of other authorizations. Row security permission lists define the set of data permissions for users who are associated with a particular permission list. You can define row security permission lists that enable users to:

  • Enter or update time reported in a previous period.

  • Use the system date if the system is not in production mode.

  • View and enter data for time reporters who belong to specific static or dynamic groups.

    We refer to this feature as group security.

Group Versus HCM Data Permission Security

If you plan to use group security, you can create groups before or after you define the other data permissions for a row security permission list. If you choose to create groups first, follow the procedures in the "Establishing Static and Dynamic Groups" section of this book.

When you open the Mass Time, TL Launch Pad, or any other page to enter or display time, the list of available time reporters depends on whether you are using group or HCM data permission security.

  • If you use group security, you can view and enter time for all group members assigned to the row security permission list.

    You can assign groups to the row security permission list on the Row Security Permission List page, described in this section, or the Security by Group page, described in "Establishing Static and Dynamic Groups".

  • If you do not have groups assigned to a row security permission list, the system automatically uses HCM data permission security.

This diagram shows the system criteria for using group or data permission security to determine the accessible time reporters

Time and Labor Security

Use the Row Security Permission List page to define whether users who are associated with a selected permission list can:

  • Make prior period adjustments.

  • Make future time entries.

  • Make prior period adjustments within a limited time frame.

  • Edit data for certain groups of time reporters.