Assign Secondary Set Rights

Screenshots are taken from a test system and may not match your system exactly.

Some employees need access permissions beyond their Team Set Rights Set Rights are the system permissions you allocate to employees to control the information available to a user about other employees..

For example, a head of department needs one set of permissions to manage their direct reports, and another set to view certain information for the whole department.

Team Rights take priority over Secondary Rights. If an employee needs access to information about other employees in Secondary Rights, select the same options for that employee in Team Rights too.

Secondary Rights tips

When setting up Secondary Rights:

  • Configure the employee's Self Set Rights to allow them access to their own information.

  • Give the employee access to information about their direct reports, including any options they need in Secondary Set Rights.

  • To give the employee access to their department or the whole organisation, configure their Secondary Set Rights.

    Use a Where Clause that includes:

    • Country

    • Company

    • Location/Division

    • Department

Some employees need access to certain employee records, but not others.

For example:

  • A health and safety officer needs access to the Accidents tab for all employees to view details of workplace accidents.

  • A head of IT needs access to the Equipment tab for all employees to view, create, modify, and delete equipment records.

For the head of IT example:

  1. In Team Rights, set the employee's access to the information of their direct reports, their team, or both.

    Team Rights take priority over Secondary Rights.

    To give an employee access to equipment records for all employees in the organisation through Secondary Rights, go to the Equipment column in Team Rights and select View, Create, Modify, and Delete.

  2. In Secondary Rights, set the employee's access to information about everyone else.

    In the Equipment column, select only View, Create, Modify, and Delete.

    Set the Where Clause Allows you filter records using a specific criteria. to 1=1 so the access applies to everyone in the organisation.

    The employee in this screenshot can view information on the selected tabs for employees whose department is IT, as set in the Where Clause.

    This is in addition to the access permissions for their direct reports in the Team Set Rights.

    The Secondary Set Rights screen.

The system checks the Team Set Rights first. It ignores any employee identified by the Team Rights Where Clause, even if the Secondary Rights Where Clause also identifies them.