4 Configurations01 Introduction To MasteryC6_RoleBasedPermissions

,Configuration,IntroductiontoRoleBasedPermissions,2012.SuccessFactors,Inc.,AnSAPCompany.Allrightsreserved.Nopartofthisdocumentmaybereproducedortransmittedinanyformorbyanymeans,electronicormechanical,withouttheexpresswrittenpermissionofSuccessFactors.Thissoftwareiscommercialcomputersoftwaredevelopedexclusivelyatprivateexpense.ThesoftwareanddocumentationareprovidedwithRESTRICTEDRIGHTS.Use,duplicationordisclosurebytheU.S.GovernmentissubjecttorestrictionsassetforthinDFARS252.227.7202-3orFAR52.227-19,asapplicable.DeveloperisSuccessFactors,Inc.,AnSAPCompany,1500FashionIslandBlvd,Suite300,SanMateo,CA94404.RwizisatrademarkofEnterpriseInformationResources,Inc.TheproductdescribedhereinincludessoftwaredevelopedbytheApacheSoftwareFoundation(/).Allotherbrandandproductnamesthatarementionedhereinarethetrademarksorregisteredtrademarksoftheirrespectiveholders.Allexamples,includingthenamesofpeopleintheexamplesorscreenshotsarefictitious.Noassociationwithanyrealperson(livingordeceased),company(existingcurrentlyorinthepast),oreventsshouldbeinferredfromanyexamplewhatsoever.InformationinthisdocumentissubjecttochangewithoutnoticeanddoesnotrepresentacommitmentonthepartofSuccessFactors.SuccessFactors,Inc.,anSAPCompany1500FashionIslandBlvd,Suite300SanMateo,CAUSA,Agenda,Objectives,UnderstandtheconceptsbehindRoleBasedPermissionsUnderstandtherequirementstouseRoleBasedPermissionsConfigureRoleBasedPermissions,IntroductiontoRoleBasedPermissions,WhatAreRoleBasedPermissions?RoleBasedSecurityConceptsElementsNotinScope,WhatareRoleBasedPermissions?,Role-basedpermissionmanagementallowsyoutohaveasmanyrolesinthesystemasyourcompanyrequires,whileatthesametimegrantingeachroleadifferentlevelofpermissiongranularity.Withtherole-basedpermissionframework,youcanchoosetograntcontrolbasedontheworkthemanagerperformsaswellascontrolthenumberofemployeestheyhavepermissiontoaccess.Whengrantingrolestousers,youcanspecifyautomaticgrantingrulessothatnewemployeesjoiningtheorganizationwillautomaticallyinheritthepermissionsdefinedfortheirspecificrole.Thisincreasesadministrativeefficiencygreatlybyreducingtheamountoftimespentcontrollinguseraccesstopermissions.,RoleBasedSecurityConcepts,TheroledefinesaccesstodataandfunctionalityRolesaregrantedtogroupsofusers(leftcircle)Grantedusersmayperformtheroleontargetusers(rightcircle)GroupscanbedynamictoautomateassignmentofpermissionsAdministratorscandefinemanyroles,RoleBasedSecurityConcepts,Example:RoleName:HRRolePermissions:ViewperformanceratingsinformationEditpotentialratingsinformationCreateperformancereviewform,RoleBasedSecurityConcepts,ExampleRoleName:ManagerRolePermissions:ViewsalaryinformationEditaddressinformation,Team,AllLevels,USAManagers,GrantedUsers,PermissionRole,TargetUsers,Team,2Levels,DEUManagers,ManagerRole,ManagerRole,ElementsNotinScope,ThiscoursecoversRoleBasedPermissionsrelatedto:PermissionsmanagedinAdminToolsEmployeeProfilePermissionsElementsnotinscope:PerformanceManagementFormTemplatepermissionsGoalPlanTemplatepermissionsCDPTemplatepermissionsRecruitingTemplatepermissions,SetupProcess,EnablingRoleBasedPermissionsInitialSetup:AdminToolsConfigurationProcess,EnablingRoleBasedPermissions,BeforeRoleBasedPermissionscanbeconfigured,theymustbeenabledinProvisioningToturnonRoleBasedpermissions,theadminusermustnavigatetoProvisioningCompanySettings,andchecktheRole-basedPermission(ThiswilldisableAdministrativeDomains)option,InitialSetup:AdminTools,AfterenablingtheRoleBasedPermissionsinProvisioning,theadminusermustgrantthepermissioninAdminToolstotheadminuseritselfbeforepermissioncanbegrantedtootherstocreateRoleBasedPermissions.UponloggingintotheinstanceafterRoleBasedPermissionsareenabled,theadminusermustselectManageRole-BasedPermissionAccess,InitialSetup:AdminTools,YouwillthenclicktheAddUserbutton,searchfortheadminuserandclickSubmitChecktheboxnexttotheadminusernameandclickGrantPermission,InitialSetup:AdminTools,Aftergrantingpermissiontotheadminusertomanagerolebasedpermissionaccess,youmustlogoutforthechangestotakeeffect.Thiscantake10minutesto1hourplus.Logbackinastheadminuserafterthepermissionshavetakeneffect.YouwillthenseethescreenbelowinAdminToolsSetUserPermissions.TheadminusernowhaspermissiontomanageallpermissionsrelatedtoRoleBasedPermissioning,aswellasgrantotherusersthepermissiontoaccessRoleBasedPermissionsfollowingthethesameprocess.Youcansearchforandaddmultipleusersthisway.,ConfigurationProcess,Nowthatthenecessarypermissionshavebeengranted,youcanbeginconfigurationThesetupprocessfollowsthesesteps:Step1:CreatethegroupsStep2:CreatetheroleStep3:Granttherole(linkroletogroups),Step1:PermissionGroups,ManagingPermissionGroupsCreatingPermissionGroups,ManagingPermissionGroups,Thefirststepinmanagingsecurityistocreatepermissiongroups.Thesegroupsarerepresentedbytheyellowcirclesintheconceptualdiagram.InAdminTools,navigatetoSetUserPermissionsManagePermissionGroups,ManagingPermissionGroups,ApermissiongroupisagroupofusersthatyoucandefineandusetograntpermissionsintheRoleBasedSecurityframeworkYoucanedit,copyanddeletethesegroups,orcreatenewgroupsClickCreateNewtocreateanewpermissiongroup,GroupsDefinitionTool,CreateGroup“EmployeesintheUS”,CreateGroup“EmployeesintheUS”,CreateGroup“EmployeesintheUS”,DoneCreateGroup“EmployeesintheUS”,GroupDefinitionTool,GroupDefinitionTool,GroupDefinitionTool,StepOneDone:GroupsareCreated,Step2:PermissionRoles,Overview:PermissionRolesManagingPermissionRolesCreatingPermissionRoles,Step2:CreatetheRole,Step1:CreatethegroupsDONEStep2:CreatetheroleStep3:Granttherole,ManagingPermissionRoles,InAdminTools,navigatetoSetUserPermissionsManagePermissionRoles,ManagingPermissionRoles,ApermissionroledefinesaccesstodataandfunctionalityYoucanedit,copyanddeletethesegroups,orcreatenewgroups,aswellasviewthechangehistoryoftherolef