How to Restrict Access to Elements Using Element Security Profile and HCM Data Role

This topic demonstrates how you can restrict and limit user access to certain elements based on your organisational needs.

Create a new Element Security Profile, include or exclude elements as per your specific requirements, and add this profile to a specific data role.

1. Create an Element Security Profile

Complete these steps to create an element security profile.

1. Navigate to My Client Groups -> Show More-> Payroll and select the Element Security Profile quick action.
2. Click the Add icon to create an Element Security Profile.
3. Enter a Name for the profile and select the Enabled check box.
4. Select a Legislative Data Group.

   Once you select an LDG, the element classifications applicable to the LDG gets populated in the Classifications region.

5. Select the classifications you want to include in the security profile. All elements within the selected classifications are automatically included.

2. Include or Exclude Individual Elements

Once you select an LDG on the Element Security Profile page and select the required primary classifications, all elements within the selected primary classifications are automatically included in the element security profile.

However, if required, you can exclude some elements from the selected classifications, or include some elements from a classification you have not selected.

Complete these steps to include or exclude individual elements.

1. Click the Add icon in the Elements section on the Element Security Profile page.
2. Search for the elements you want to include or exclude and select the

   Inclusion Status as required.

   When you select an element and its primary classification, the Inclusion Status for the invidual elements is automatically displayed as follows:

   • If the primary classification of the selected element is included in the profile, the inclusion status is set to Exclude.
   • If the primary classification is excluded from the profile, the inclusion status is set to Include.

3. Click Save and Close. The Element Security Profile is saved.

   You can include multiple LDGs within a security profile. Each LDG must have at least one classification or element included.

3. Add an Element Security Profile to a Data Role

After you create an Element Security Profile, add the profile to a Data Role. By default, for all existing data roles, the Element Security Profile is populated with View All Elements. You can edit a Data Role and either add an existing element security profile, or create a new element security profile.

1. Add an Existing Element Security Profile

   Complete these steps to add an existing Element Security Profile and restrict elements for a specific data role.

   1. Navigate to My Client Groups -> Show More-> Workforce Structures Payroll and select the Data Roles and Security Profiles quick action.
   2. Search and select the Data Role and click Edit.
   3. Select an existing profile in the Element Security Profile field.
2. Edit a Data Role and Create an Element Security Profile
   You can also create a new Element Security Profile and add it to the Data Role you are editing.

   1. Navigate to My Client Groups -> Show More-> Workforce Structures Payroll and select the Data Roles and Security Profiles quick action.
   2. Search and select the Data Role and click Edit.
   3. Select Create New in the Element Security Profile field.
   4. Enter the name of the profile in the Name field.
   5. Select the LDG and Primary Classifications, include or exclude elements as required.

   6. Click Save and Close.

3. Use the Element Tab and Create an Element Security Profile

   Complete these steps to create an Element Security Profile using the Element tab.

   1. Navigate to My Client Groups -> Show More-> Workforce Structures Payroll and select the Data Roles and Security Profiles quick action.
   2. Search and select the Data Role and click Edit.
   3. Click Next and select all the security profiles.
   4. Click Next. Click the Element tab.
   5. Select Create New in the Element Security Profile field.
   6. Enter the name of the profile in the Name field.
   7. Select the LDG and Primary Classifications, include or exclude elements as required.

   8. Click Save and Close.