Examples of Role Mappings

You must provision roles to users either automatically or manually. This topic provides some examples of typical role mappings to support automatic and manual role provisioning.

Creating a Role Mapping for Employees

All employees must have the Employee role automatically from their hire dates. In addition, the few employees who claim expenses must request the Expenses Reporting data role.

You create a role mapping called All Employees and enter the conditions shown in this table.

Attribute

Value

System Person Type

Employee

HR Assignment Status

Active

In the role mapping you include the:

  • Employee role, and select the Autoprovision option

  • Expenses Reporting role, and select the Self-requestable option

Creating a Role Mapping for Line Managers

Any type of worker can be a line manager in the sales business unit. You create a role mapping called Line Manager Sales BU and enter the conditions shown in this table.

Attribute

Value

Business Unit

Sales

HR Assignment Status

Active

Manager with Reports

Yes

You include the Line Manager role and select the Autoprovision option. Any worker with at least one assignment that matches the role-mapping conditions acquires the role automatically.

In the same role mapping, you can include roles that line managers can:

  • Provision manually to other users.

    You select the Requestable option for these roles.

  • Request for themselves.

    You select the Self-requestable option for these roles.

Tip: The Manager with Reports attribute always means a line manager. Setting the Manager Type attribute to Line Manager is the same as setting Manager with Reports to Yes. If your role mapping applies to managers of a type other than Line Manager, then don't set the Manager with Reports attribute.

Creating a Role Mapping for Retirees

Retired workers have system access to manage their retirement accounts. You create a role mapping called All Retirees and enter the conditions shown in this table.

Attribute

Value

System Person Type

Retiree

HR Assignment Status

Inactive

You include the custom role Retiree in the role mapping and select the Autoprovision option. When at least one of a worker's assignments satisfies the role-mapping conditions, he or she acquires the role automatically.