Group Security

To add a security group, follow these steps:

1.       Select Security – Group Security.

2.      Click the ‘Add Group’ button.

3.       Enter the name and description.

4.      Use the ‘Default Company’ drop-down to assign a default company.

5.       Enter the maximum number of pay periods the group should be able to view in the ‘future’ and ‘past’ fields.

6.      Enter the session timeout. This field represents the number of seconds the user will automatically be logged out of the system due to inactivity. 600 seconds is recommended.

7.       Set an IP address restriction by Security Group by selecting ‘Yes’ to ‘Restrict Access by IP address’.

NOTE - You must still set IP restriction at the user security level as well.

8.      If the group will be editing punches, select ‘Yes’ to ‘Generate Exceptions at Login’.

NOTE - Exceptions will be generated for the current period only if today’s date falls within the current period. If today’s date falls after the current period, exceptions will be generated for the current and next pay period.

9.      If you select ‘No’ to ‘Generate Exceptions at Login’, a user must manually re-query alerts for the current and next period.

10.   The ‘Employee List Filtering’ option should be applied if the group should see a specific employee list.  Otherwise, the employee drop down list will be populated with all employees assigned to the supervisors. You may also set the option to allow the user to override the filter set using the ‘Allow edits by user’ options.

11.   The group membership portion is based on specific security masks set on the group permissions page. Enter the associated permissions to be assigned to the group.

12.   Administrators can restrict pay types that users belonging to the security group will have available for selection. Select those pay types to grant access to under ‘Pay Type Access Restrictions’. If no pay types are selected, the users that belong to the security group will have access to all pay types active in the system.

a.       If a user is assigned to multiple groups the least restrictive pay type restrictions is what the user is able to select. For example, if the employee security group is also a member of the supervisor security group and the employee group is given access to pay type VAC and supervisor group is given access to pay types REG,VAC,SICK, when the user is logged in he/she may see pay types REG,VAC, SICK.

13.   To restrict the organization levels the security group will have available for selection, establish those restrictions under ‘Org Level Access Restrictions’. If no organization levels are selected, the users that belong to the security group will have access to all organization levels active in the system.

a.       After the company and org level depths values are selected, there are also four permissions users can restrict from all items, home items only, disallow all access, selected org level items.

                                                               i.      All Items – for the organization level depth selected, all of org level items will not be available for the security group.

                                                             ii.      Home Items Only – For the organization level depth selected, the user will only be able to see the employee’s home organization levels and will not be able to override organization levels to any value.

                                                            iii.      Disallow All Access – The user will not see this organization level depth for any Daily Procedures records or on the Employee Information – Groups page. The organization level will display on reports.

                                                           iv.      Selected Org Level items - The user will have access to the employee’s home organization level assignment as well as the selected organization level items when overriding an employee’s organization levels. Select those organization levels in the listing box below the org levels drop-down.

14.   Click the ‘Save’ button.

To copy a group, follow these steps:

1.       Select the security group to copy in System Setup– Group Security.

2.      Click the ‘Copy Group’ button.

3.       Enter the name and description of the new security group.

4.      Adjust any information accordingly.

5.       If you do not want to copy the group permissions assigned to the security group, select ‘No’ to copy permissions.

6.      Click the ‘Save’ button.