Additional Payroll Features Enhanced to Secure Access for Employees with Multiple Assignments

You can now use assignment-level security to secure user access for employees having multiple assignments. In this release, these additional payroll features are enhanced to restrict access to payroll relationships:

• Payslips

• Person Results

• Balance by Date

• QuickPay Payments

• Adjust Individual Balances

• Simplified QuickPay

• Calculation Entries

• Event Action Notifications

• Event Notifications

• Third-Party Person Payment Methods

• View Process Information Groups

The redesigned, Redwood pages for the above features support assignment-level security. 

With the existing behavior, as a payroll user if you have access to one of your employee's assignments, you can view all the payroll relationships and assignments of that employee. With this enhancement, you can only view the payroll relationship for the assignment you have access.

For example, if an employee has multiple payroll relationships, one with a French payroll statutory unit (PSU) and one with a UK PSU, currently you can view both payroll relationships, even if your security profile restricts you to access only the UK assignment. With this enhancement, you can only access the UK payroll relationship and assignment.

 However, if an employee has multiple assignments within the same payroll relationship, and if you have access to one of the assignments, you will be able to access the employee’s payroll relationship as well as all their assignments. For example, an employee has multiple assignments within the same payroll relationship, one on a weekly payroll and one on monthly payroll frequency, and you have restricted access to assignments within the monthly payroll, you will still be able to access both assignments.

Restrict access to an employee’s payroll relationships based on your organizational business needs. 

Steps to Enable

If you have already implemented assignment-level security, no additional steps are required.

However, if you are implementing it for the first time, follow the steps as documented in feature Secure Access for Workers with Multiple Assignments under Application Security for release 21C.

Tips And Considerations

For the Person Search to work, ensure that you schedule the following processes on a regular basis:

Compute Users ACL processes

Job Name	Parameters	Frequency
Compute Users ACL by Event	N/A	Every 15-60 minutes
Compute Users ACL	User population: Logged in users	Every 30-120 minutes
Compute Users with Large ACL	Action: Compute User population: All users with large ACL	Daily

Key Resources

For more information, refer to the following:

• HCM Data Roles and Security Profiles
• Export and Import of HCM Custom Roles and Security Profiles
• What's New documentation for Secure Access for Workers with Multiple Assignments under Application Security for release 21C.
• Schedule ACL Processes