Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2024-01-26
Example: Enable Segment-Based Security for Student Expenses

Example: Enable Segment-Based Security for Student Expenses

This example illustrates how to enable workers to manage only student expense data by configuring segment-based security.
Your university manages expenses on behalf of nonworkers, including matriculated students. You want to enable a subset of workers to:
  • Create and submit expense reports on behalf of only matriculated students.
  • View expense data only for matriculated students to run custom and standard reports.
  • Assign the workers that you want to access student expense data to:
    • A
      Student Expense Administrator (Constrained)
       security group.
    • The relevant roles and academic units.
  • Configure the
    Expense Report Event
     business process and security policy in the Expenses functional area. See: Steps: Configure Business Process Definitions.
  • Security: These domains in the Student Core functional area:
    • Student Data: Student ID
    • Student Data: Student Profile
  1. Access the
    Create Security Group
     task.
  2. On the
    Type of Tenanted Security Group
     prompt, select
    Segment-Based Security Group
    .
  3. In the
    Name
     field, enter
    Student Expenses Only
    .
  4. Click
    OK
    .
  5. On the
    Security Groups
     prompt, select
    Student Expense Administrator (Constrained)
    .
  6. On the
    Access to Segments
     prompt, select
    Student Expense Payee Type Segment
    .
  7. Click
    OK
    .
  8. From the related actions menu of the segment-based security group, select
    Security Group
    Maintain Domain Permissions for Security Group
    .
  9. On the
    Domain Security Policies permitting View access
     prompt, select
    Process: Expense Reports
    .
  10. Click
    OK
     and
    Done
    .
  11. From the related actions menu of the
    Expense Report Event
     business process, select
    Business Process Policy
    Edit
    .
  12. On the
    Security Groups
     prompt in the
    Create Expense Report for Non-Worker
     section, select
    Student Expenses Only
    .
  13. Click
    OK
     and
    Done
    .
  14. Access the
    Activate Pending Security Policy Changes
     task.
  15. In the
    Comment
     field, enter
    Restricting workers to only student expense data.
  16. Click
    OK
    .
  17. Select the
    Confirm
     check box.
  18. Click
    OK
    .
Add expense payments on payment elections for matriculated students, or enable these students to manage their own payment elections.
Reassign credit card transactions to matriculated students manually to include these transactions on student expense reports.