Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2023-06-23
Steps: Set Up Security for Onboarding

Steps: Set Up Security for Onboarding

Security:
Security Configuration
 domain in the System functional area.
Set up security for workers to complete each step of their Onboarding process. To ensure that workers can complete their Onboarding tasks, synchronize the business process and domain security policies. Business process security policies provide access to actions in the
Onboarding
 business process. Domain security policies provide access to view and modify data within those actions.
  1. Configure security permissions on the
    Set Up: Onboarding
     domain in the Onboarding functional area.
    This domain provides access to various tasks to set up Onboarding rules and templates. Restrict access on this domain to only administrators.
    1. Set up security for the
      Onboarding Setup
       business process.
    2. Set up security for the
      Onboarding
       business process.
    3. Set up security for the subprocesses that you include in the
      Onboarding
       business process.
      You can enable pre-hire workers to complete Onboarding steps before their start date, like pre-hire state withholding elections. Under
      Who Can Start the Business Process
      , include the
      Pre-Employee as Self
       and
      Pre-Contingent Worker as Self
       security groups.
      Under
      Who Can Do Actions on Entire Business Process
      , grant permissions to the
      HR Partner
      ,
      HR Administrator
      , or other relevant HR roles in your organization. Grant
      View Completed Only
       permission to the same groups that have permission on the initiating action. Any pre-hire security groups with
      View Completed Only
       permission can see future dated events.
  3. Edit Domain Security Policies.
    Set up security for the
    Onboarding
     business process.
    Functional Area
    Onboarding Action
    Self-Service Domains
    Worker Data Domains
    Benefits
    Change Benefit Elections
    Self-Service: Benefits
    Worker Data: Benefits
    CAN Payroll
    Complete Federal Withholding Elections
    Self-Service: Payroll (My Withholding Elections) - CAN
    Contact Information
    Change Emergency Contacts
    Self-Service: Emergency Contacts
    Person Data: Emergency Contacts
    Contact Information
    Contact Change
    • Self-Service: Home Contact Information
       (plus subdomains)
    • Self-Service: Work Contact Information
       (plus subdomains)
    • Person Data: Home Contact Information
       (plus subdomains)
    • Worker Data: Work Contact Information
       (plus subdomains)
    Contact Information
    Name Change
    Self-Service: Legal Name
    Person Data: Legal Name
    Contact Information
    Preferred Name Change
    Self-Service: Preferred Name
    Person Data: Preferred Name
    Onboarding
    Complete Form I-9
    Self-Service: I-9 Forms
    Worker Data: I-9 Forms
    Personal Data
    Change Self-Identification of Disability
    Self-Service: Self-Identification of Disability - USA
    Worker Data: Self-Identification of Disability - USA
    Personal Data
    Edit Government IDs
    Self-Service: Government IDs
    Person Data: Government IDs
    Personal Data
    Edit Licenses
    Self-Service: Licenses
    Person Data: Licenses
    Personal Data
    Personal Information Change
    Self-Service: Personal Data
     (plus subdomains)
    Person Data: Personal Data
     (plus subdomains)
    USA Payroll
    Complete Federal Withholding Elections
    Self-Service: Payroll (My Withholding Elections) - USA
    USA Payroll
    Manage Payment Elections
    • Self-Service: Payment Election
    • Self-Service: Payroll (My Payment Elections)
    • Self-Service: Payroll Interface (Payment Elections)
    • Worker Data: Payroll (Payment Elections)
    • Worker Data: Payroll Interface (Payment Elections)
    On the self-service security domains, grant modify permission to the same security groups you assigned to the initiating actions. These groups include:
    • Contingent Worker as Self
    • Employee as Self
    • Pre-Contingent Worker as Self
    • Pre-Employee as Self
    On the worker data domains, grant view permission, at a minimum, to the same roles you assigned to other business process actions. These roles can include
    HR Administrator
    ,
    HR Partner
    , and more.
    You can hide specific types of contact information (such as instant messenger or web address) by not assigning security groups to those domains.
  4. Activate Pending Security Policy Changes.
Secure the
Contact Change
 task in the
Onboarding
 business process so that workers can view and update only their home address, personal email address, and phone number. Add the
Employee as Self
 security group to the:
  • Contact Change
     task in the
    Onboarding
     business process.
  • Contact Change
     business process security policy.
  • Self-Service: Home Address
    ,
    Self-Service: Home Email
    , and
    Self-Service: Home Phone
     domain security policies.
Don't assign the
Employee as Self
 security group to the
Self-Service: Work Contact Information
 domain, or to any other
Self-Service: Home Contact Information
 subdomain.