2082750 - What are Roles for Groups and Group Permissions under the Security tab - Onboarding 1.0

Permission Role in Onboarding 1.0 to grant access to specific ONB area/Process

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

SAP SuccessFactors Onboarding 1.0

From the home dashboard, click the Security tab.  The Group tab is the default.

 

Roles for Groups

The roles of the groups are pre-determined by application settings. Each of these roles refers to a specific behavior. Administrators may assign the following roles to a group:

1. Roles with access to complete an entire process

• User Role
   
• Anyone included in this group will have access to onboard a new employee in any company, division, location, department, or position, regardless of where they are located.  

• Hiring Manager Role
   
  • An activity can be assigned based on the name of the Hiring Manager which is included in the new employee record. 
     
• Recruiter Role
   
• An activity can be assigned based on the name of the Recruiter Manager which is included in the new employee record. 

 

2. Roles with access to complete certain assigned activities within a process

• Internal Role
   
• Anyone included in this group will have access to execute additional activities that need to be done in order to complete the new employee’s Onboarding process within the company. For example, activities such as network login, desks, cell phones, etc. The internal role can only view and execute activities assigned to them in their own Work Queue. There are no hiring permissions are available for this role.

• External Role
   
• Anyone included in this group will have access to execute additional activities that need to be done in order to complete the new employee’s Onboarding outside the company. For example, activities such as background checks, drug tests and uniforms.  The External role resources can only view and execute activities assigned to them in their own Work Queue.  There are no hiring permissions available for this role.

 

3. Roles with access to administrate Onboarding 1.0

• HR Admin
   
• HR Admins are responsible for maintaining the notifications, security, reference files and certain account settings.

 

4. Role with access DocumentCenter

• DocumentCenter
   
• Users included in this group will have access to view and print documents. Stored in the DocumentCenter

 

5. Role should not be used

• System Admin
• Partner Admin
   

 

6. Role with access to the Employee Portal

• Employee Portal
   
• The Employee Portal Group contains users with access to the Employee Portal administration.

 

 

Permissions for Groups

 

 

Security in onboarding is based on group permissions, which determine actions available for a user within the onboarding system.

For users, responsible for the on-boarding process, the permissions determine in whose queue an activity will be placed. For example, when a new hire is transferred from a Recruiter to onboarding, the new employee can be placed in the Hiring Manager’s queue.

For users, responsible for administering, the permissions define the access to the administrative units. For example, an administrator can have certain access to manage reference files, account settings and admin reports.

Groups are created and group permissions are assigned; by adding users to a specific group, administrators can restrict the activities of different types of user. Group membership controls, who can access onboarding and what actions can be performed.

Permissions of Roles with access to complete an entire process

1. Activity Permissions

• Manageable availability to execute an activity under certain conditions, e.g., location, gender, age, start date, etc.

 

2. Activity Steps Permissions

• Manageable availability to execute steps of a process.

 

3. Monitoring Permissions

• Availability to monitor an activity under certain conditions, for example, location, gender, age, start date, etc.

 

4. Monitoring Steps Permissions

• Availability to monitor steps of a process.

 

5. Document Permission

• Availability to view documents from Work Queue.

 

Name of the Role	Configurable Permissions	Default Permissions
User	Start Process Activity Permissions Activity Steps Permissions Monitoring Permissions Monitoring Steps Permissions Document Permission
Hiring Manager	Activity Permissions Activity Steps Permissions Document Permission	Start Process Activity Permissions Activity Steps Permissions Document Permission Monitoring Permissions Monitoring Steps Permissions
Recruiter	Activity Permissions Activity Steps Permissions Document Permission	Start Process Activity Permissions Activity Steps Permissions Document Permission Monitoring Permissions Monitoring Steps Permissions

 

Permissions of roles with access to administrate the onboarding:

Name of the Role	Configurable Permissions	Default Permissions
HR Admin	Allow View  Glance Allow Delete HRData Report Permission Re-assign activity from Work Queue Start Process Access to administrate levels of corporate structure Access to administrate account settings Access to create Admin Reports Audit Trial Access	Activity Steps Permissions[1] Monitoring Steps Permissions
Client (Partner) Admin	Allow View Glance Allow Delete HRData Report Permission Re-assign activity from Work Queue	Activity Permissions Activity Steps Permissions Monitoring Permissions Monitoring Steps Permissions Document Permission Start Process Audit Trial Access Access to administrate levels of corporate structure Access to administrate Reference Files Access to administrate account settings Access to create Admin Reports

Onboarding 1.0, Security, Security Groups, Permission, Client Admin, Administrators, Recruiter, Hiring Manager , KBA , LOD-SF-OBD-ADM , Admin Tools, Settings, Permissions , How To

SAP SuccessFactors Onboarding all versions