2088654 - Administrative Domains - Distributed Admin - HCM Suite

• What is Administrative Domain?
• How to use Administrative Domains?

Administrative Domains is a tool that gives you more granular control over Admin access to users

• When you use Administrative Domains, you'll be able to assign Admins to manage only a selected user population as well as only a selected group of Admin functions. Previously, Admins always had access to the entire user population.

• Please find the SuccessFactors Guide attached to this solution.

How does Administrative Domains work?

• Using Administrative Domains essentially creates two levels of Admins: Global Admins and Local Admins. A Global Admin generally acts like a “super-admin” for your SuccessFactors system, with full access to Admin activities and full access to the entire user population. Global Admins assign and manage Local Admins. A Local Admin can be assigned access to just a subset of Admin activities, such as resetting passwords, and assigned to manage only a selected group of users, such as only the Operations Division. Local Admins can have as much or as little access to people and functions as determined by the Global Admin.
   
• Additionally, you can continue this Admin hierarchy down the organization, where Local Admins with broader access to the system can create Local Admins of their own to help them out, meaning that they can assign another Admin access to a subgroup of the people within their jurisdiction.
   
• Groups and their corresponding permissions are automatically updated when changes occur. For example, if you've assigned an Admin to oversee All Departments in the company and next month the company adds a new Department X, then your Admin will now automatically gain access to Department X because it's within his assigned group.
  Previously, changes like this would have to be manually updated, meaning that you would have to manually give each Admin permission to access the new Department X.

How can you get Administrative Domains?

• To get started, you must contact SuccessFactors Customer Success to enable Administrative Domain for your system. Once it's enabled, you can start assigning Local Admins. To do so, log into SuccessFactors and go to Admin > Manage Security > Administrative Domain Privileges. From there, you can make your Local Admin assignments.
   
• Administrative Domains (previously known as Distributed Admin Lite and Distributed Admin) as generally available (GA) to customers. Administrative works with all user data activities in the system.

How can you enable Administrative Domains?

• Please ask Customer Success to enable this feature in provisioning: Once enabled, the Global Admin at the company can then assign each Local Admin to a selected group of users.
  Note to SF Staff• In Provisioning: To enable Administrative Domains from Provisioning, go to Provisioning > Company Setting. Scroll down the page and select both of these checkboxes: Enable Administrative Domains and Restrict Permission.

Distribution Privileges

In Admin Tools: Once you enable Administrative Domains, your client will see the Administrative Domain Privileges link in the Manage Security section on the Admin Tools page. They can use this link to manage the Local Admin access levels.

How do you set access levels now with the enhanced Administrative Domains?

     You still set the Admin access levels from the Manage Security > Administrative Domain Privileges page. But now when specifying the group (or business unit or region) that the Admin will be assigned to, you have new options:

• All: For example All Departments. This option includes all the departments in your entire company. Selecting this option gives the Admin access to every department in the company. If a new department is created, the Admin will automatically get access to the new department.
• My: For example, My Department. This option specifies the department that the Admin is currently in, meaning if the Admin works in Department A, then the Admin gets access to oversee Department A. If the Admin changes departments, then he automatically loses access to Department A but gains access to the new department.
• Other: For example Other Departments. This option lets you specify the exact departments you want the Admin to access, such as only Department B and Department C, but not Department A. Selecting this option means that only changes that occur in either Department B or Department C automatically apply to the Admin; changes to Department A won't affect the Admin because he doesn't have access to that department.

      Tip Don't forget that you can create very granular access levels because permissions work in conjunction with one another. For example, you can assign an Admin to oversee only the Baltimore office in the Technology department in the Operations division.

Adm Domain, domain, permission SF, permissions SuccessFactors, , KBA , LOD-SF-PLT , Platform Foundational Capabilities , How To