After system configuration, ensure that only the HR Administrator [sn_hr_core.admin]
role has access to sensitive information. Remove the HR Administrator role from System
Administrator [admin] role to prevent the System Administrator from viewing sensitive HR
information.
Role required: admin with sn_hr_core.admin
Ensure that you have at least two users
with the HR Administrator role. If you assign only one person with the role and that
person is deactivated, you no longer have a user that can perform the HR admin
duties.
After removing the HR administrator role from System Administrator,
log out and log back in to ensure that the changes take effect.
Note: Ensure that you
have completed setup before removing the HR Administrator
role.
Note: Scheduled jobs that require the Admin role do not run. But,
all HR scheduled jobs should run after the Admin role is
removed.
The Employee
Service Center administrator [sn_hr_sp.esc_admin] role is contained in the System Administrator
[admin] role.
Ensure that someone in your organization has the Employee
Service Center administrator [sn_hr_sp.esc_admin] role after removing the admin
role.
-
Log in as admin.
-
From User Administration, go to
Roles (left navigation menu).
-
Click admin.
-
From the Contains Roles tab, click
Edit.
-
From the Contains Roles List column, highlight and move
sn_hr_core.admin to the
Collection column.
-
Click Save.
-
Log out.
