Different manager authorisation (ESS-MSS)

You can set that a manager has access to both his own data and the data of the people he manages. By default a manager then has the same rights to his own data as to the data of the people he manages. However, you can also set it up in such a way that a manager has limited rights to his own data and extensive rights to the data of the employees he manages.

Example: 

User WESTERA is linked to employee Anne Wester. Anne Wester is a manager and has access to the properties of the employees in her department.

Using authorisation you can achieve the following: The user Anne Wester is allowed to view and change the data for all employees of her department, with the exception of the employee Anne Wester. If she wishes to change her own data, this is only possible, for example, via a manager higher up. This way you prevent, for example, that she can change her own salary.

To use this functionality, you must enable the Split employee authorisation into ESS/MSS activation.

Description

Regarding authorisation, one of the following situations may apply:

  • You are not using this functionality

    Only the Employee (MSS) folder is available in the Authorisation tool. Authorisation for this is no different from other functions. You do not have to read the rest of this description.

  • You are using this functionality

    The Employee (ESS) and Employee (MSS) folders are available in the Authorisation tool. Authorisation for Employee (ESS) only applies with regard to the own employee data of the user who is logged on.

Preparation
  • Activate functionality

    If you want to use this functionality, you first have to activate it. Enable the activation Split employee authorisation into ESS/MSS. After enabling the activation, the Employee (MSS) and Employee (ESS) folders are available in the Authorisation tool.

Procedure