I’ve created a lobby element which shows upcoming leave for senior management - this is for use by our Project Management department.
As Senior Managers are across various org units, I’ve had to grant Project Managers access to departments via Graphical Org Structure and to relevant Positions via Position Access Setup.
This means, they can see senior managers’ time registration/absences.
Is there a way to grant access just to the lobby data source, without having to touch HR org/position access? i.e. so they are only able to see these absences via the lobby element?
Best answer by SimonSundberg
We were having the same issue, people needed access to certain information in the HR-module, adding HR-access gave way too much information as they just needed a specific thing.
We solved it by creating an IAL - “Information Access Layer” that only gathered the information that was necessary and gave access to that IAL to the users who needed it. We then created a Lobby element using that data. The IAL runs every 10 minutes so it’s not realtime data but it’s enough for us.
It’s a pretty roundabout way to get it working but we would rather have it that way then give too much access to the HR-module. Just make sure that the permission for the IAL is only granted to the right personel if it’s sensitive information.
Thanks for your reply KasunB - I had tried this, but it grants access to the lobby element, but visible employee absences are still limited via HR restrictions - i.e. require Org Unit & Position Access to be updated. (Same question as Christer above).
Perhaps there isn’t a way around this, the only downside is it requires ongoing maintenance as Org Unit access is by individual employee rather than position/I’d rather not open up time reg/absence of all employees, just to be able to view this lobby element.
I don’t think there are a way around that. or should there? To me it would be a hole in the established HR security. As always security bites you in the back sometimes.
There doesn’t appear to be. My only issue with the HR settings, is it actually gives them more visibility than I want - i.e. I only want them to see these employees in the lobby element, but granting org/position access then makes those employees visible in any HR screen they have access to.
We were having the same issue, people needed access to certain information in the HR-module, adding HR-access gave way too much information as they just needed a specific thing.
We solved it by creating an IAL - “Information Access Layer” that only gathered the information that was necessary and gave access to that IAL to the users who needed it. We then created a Lobby element using that data. The IAL runs every 10 minutes so it’s not realtime data but it’s enough for us.
It’s a pretty roundabout way to get it working but we would rather have it that way then give too much access to the HR-module. Just make sure that the permission for the IAL is only granted to the right personel if it’s sensitive information.
Hi @SimonSundberg I have read your reply with great interest, we have tried ourselves to make an IAL, but we cannot get it to work correctly - would it be possible for you to inform me what your IAL looks like, pls. Best regards, Marianne
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.
