How Does Payroll Security work? Article

How Does Payroll Security work? Article

There are two components to security:


Firstly, access to elements of the Payroll module can be limited to specific users. 


Secondly, information that users can see and change can also be controlled.  This security applies to data throughout the system including the payroll module, and budgeting and reporting areas.


A) Access to the Payroll Module

Access is managed on Assign User Permissions by checking the required access boxes on the User Profile tab.



1. Checking" Payroll" provides the following access, namely the ability to see the main menu :



2. Checking "Payroll" and "Payroll Setup" provides the following access:




3.  Checking "Payroll" and "Employee Roster" provides the following access:



4. Checking "Payroll" and "Payroll Data Entry" provides the following access:



Please note that the "Payroll" check-boxes on Manage Objects and Manage Budget Accounts are not security features.  Rather, checking this box makes the Object and/or Budget Account available for budgeting in the Payroll module.


Related Article/s:

What Do I Do When an Application User is Setup with Payroll Security But Does not See the Payroll Menu?


B) Access to Payroll Information

Access to view payroll information is managed in Assign User Permissions on the OrgUnit Permissions tab. 

Here users can be given access to information of an OrgUnit and that information can be controlled through the use of Sensitive Levels, Sensitive Summary, and Sensitive Details.  Sensitive Levels security applies at the Object level.  Sensitive Summary and Sensitive Details at the Budget Account Number level.


For example, if the Object "5100" was assigned Sensitive" Level 1" and the user was only assigned a level of "Non-Sensitive", they would not be able to view the information for Object "5100" anywhere in the system, including the Payroll module, Reports and Budgets. 


Please note, provided a User has been assigned appropriate Sensitive Level, Sensitive Summary and Sensitive Detail security, if an Object as been setup with "Adjustment" on Manage Objects/Manage Budget Accounts and the user has been assigned "Write" permission on the OrgUnit Permissions tab, they will be able to make changes to Payroll amounts through the Accounts Details tab/Adjustments Sub-tab even if they have not been given access the Payroll Module.


See related articles:

How Does the Sensitive Hierarchy Work (Why Don't I See Data)?

When and Why Do I Use Sensitive Levels and/or Sensitive?

    • Related Articles

    • Payroll Assignments Article

      On this screen non-hourly employees/group of employees (as defined on the  Employee Roster) are selected, assigned their salaries (and salary increases), their Budget Account number/s and relevant employer salary expenses (as defined on the Payroll ...
    • Payroll Assignments Calendar Article

          Tutorial Link Purpose: In general, payroll as defined on Payroll Assignments can be distributed across fiscal periods based on number of pay periods, number of working days, or any other measure.  Use this window to map the number of pay periods ...
    • Duplicate Payroll Article

          Tutorial Link Purpose: This functionality duplicates core and selected Payroll screens from one BudgetID and paste it into the corresponding screens of the target BudgetID. Note: The core screens of Payroll Expense Definitions, PR Assignments ...
    • Payroll Expense Definitions Article

         Tutorial Link Purpose: The Payroll Expense Definitions window enables you to define employer payroll-related expenses. This feature of the system is optional. Note: A change in Payroll Expense Definitions needs to  “Recalc Payroll Trx” in order to ...
    • Payroll Checkbox and Payroll Projections Sub-tab Article

      When the "Payroll" checkbox is checked on the Manage Objects it automatically checks the "Payroll" box on the Manage Budget Accounts for all Accounts numbers that include the Object code. If you do not want a particular Budget Account number to be ...