Inquiry Access for roles during a specific time

 4 Replies
 0 Subscribed to this topic
 16 Subscribed to this forum
Sort:
Author
Messages
Jose
Basic Member Send Private Message
Posts: 15
Basic Member
Hello,

I have been approached to basically locked down anyone in HR during a certain time once every other week to avoid having any changes occur when payroll is processing. I'm quite new to security using LSF9 and just think there has to be a simple way of doing this. Any ideas anyone?
mark.cook
Veteran Member Send Private Message
Posts: 444
Veteran Member
What we do is that when Payroll is about to kick off the bi-weekly payroll run, they update a field ( I forget the form off the top of my head), that field is set up in a rule that if "Y"' then we restrict access to certain functions like changing bank accounts, etc.

This adds one small step to the payroll process but this way we are letting them set the time for the access to be blocked. We have found it very useful and it allows payroll to properly control how much time they need to process, verify and sign off that payroll is completed.

In addition to the security rule, we also have added a stop light on the LBI dashboard that all employees see. When payroll is running it shows a red light and lists the functions they can not complete. When payroll is not running it gives a green light and indicates changes are available to be made.


Jose
Basic Member Send Private Message
Posts: 15
Basic Member
I am curious to know what field or form your talking about. Would you be able to provide me with more details?
mark.cook
Veteran Member Send Private Message
Posts: 444
Veteran Member
We created a bogus paycode called payroll processing. They flip the flag from active to inactive. This change triggers the rules in security to allow or disallow access.
Jose
Basic Member Send Private Message
Posts: 15
Basic Member
Would you be able to provide more details on how this process works? How would that payroll code trigger rules in security? If you dont want to post on here, you can send me a message.