Set Up Segmented Security by Compensation Plans

Analyze your organization's needs and decide whether segmented security for compensation is appropriate. Evaluate your current organizational structure and thoroughly understand segmented security requirements.

Configure organizational hierarchies, security groups, and organizational roles.

The use of segmented security groups won't apply to every business; it involves a number of complex steps and impacts your overall compensation practice. Even if you currently use location hierarchies for other purposes, your current hierarchies might not be adequate for restricting access to compensation components. Also, intersection security, constrained job-based security groups, and rule-based security groups aren't supported for Compensation.

Create location hierarchy organizations that parallel the segments you need.

Security:

Set Up: Compensation Security Segments
domain in the System functional area.

Set Up: Tenant Setup - HCM
domain in the System functional area.

Set Up: Assignable Roles
domain in the Organization and Roles functional area.

Reports: Organization
domain in the Organization and Roles functional area.

Security Configuration
domain in the System functional area.

Worker Data: Non-Funded Plan Assignments
in the Core Compensation functional area.

Self-Service: Non-Funded Plan Assignments
in the Core Compensation functional area.

Segmented security groups divide access to Compensation setup data (such as Compensation Plans) among multiple Compensation Partners. Example: A business with sites in Canada, the U.S., and Mexico might require a separate Compensation Partner for each country with appropriate access to the setup data.

Compensation Administrators need access to all compensation segments you create, no matter how you decide to segment your organization's compensation groups.

Enable the segmented security group feature for compensation.

Access the

Edit Tenant Setup - HCM

task.

In the

Compensation

section, select the

Enable Compensation Setup Segment Security

check box.

Enable the Compensation Partner
role for the Location Hierarchy
organization type.

Access the

Maintain Assignable Roles

task.

In the

Enable for Organization Types

column, add Location Hierarchy
to any organization types already enabled.

In the applicable location hierarchy organization, assign the Compensation Partner
role to the desired worker.

Access the

View Organization

task.

Open the applicable location hierarchy organization.

From the related actions menu, select

Roles

Assign Roles

In the

Assign Roles

section, select Compensation Partner
as the

Role

, and select the desired

Worker

to whom the

Role

should be assigned.

Create an organization membership security group that includes the applicable location hierarchy.

Access the

Create Security Group

task.

For

Type of Group

, select Organization Membership Security Group
.

In the list of

Organizations

, add the desired location hierarchy to the security group.

Specify whether the new organization membership security group

Applies to Current Organization Only

Applies to Current Organization And All Subordinates

Create an intersection security group that includes the applicable organization membership security group and the Compensation Partner security group.

Access the

Create Security Group

task.

For

Type of Group

, select Intersection Security Group
.

In the list of

Security Groups

, add the desired organization membership security group and the Compensation Partner security group.

Create a security segment for the desired compensation component, such as country.

Access the

Create Compensation Setup Security Segment

task.

Select the

Pay Component

(or set of components) to contain within the segment.

Create a segment-based security group that joins the applicable intersection security group with the applicable security segment. This is a critical step that ties together the preceding steps.

Access the

Create Security Group

task.

For

Type of Group

, select Segment-Based Security Group
.

In the list of

Security Groups

, add the applicable intersection security group.

In the list of

Access Rights

, add the applicable security segments.

Repeat steps 3 through 7 for each secured compensation segment you want to create.

Create Segment-Based Security Groups.

Create a segment-based security group for the Compensation Administrator that joins the Compensation Administrator with all the security segments created.

To use any new segment-based security group that you've created, update and activate the domain security policy and business process security policy for the Compensation functional area.

Access the

Functional Areas

report.

From the related actions menu for Core Compensation and Advanced Compensation, select

Functional Area

View Business Process Policies

(or

View Domain Policies

Click

Edit Permissions

Add the segment-based security group to the applicable domain security policy/business process security policy.

Delete the Compensation Partner
security group from the applicable domain security policy/business process security policy.

Access the

Activate Pending Security Policy Changes

task to confirm changes.

You can use the

All Compensation Setup Security Segments

report to review which intersection groups constrain the segment-based security groups for a particular compensation segment or component.