Blocking Contingent/contractors from accessing the HR Portal (Employee Center)

[Rob Sestito]

Hey Team,

Looking for ideas if anyone has any and/ or if anyone has done this before.

We have contingent works that to not use our HR department for anything. We want to block their access to the employee service center.

Currently, from our main IT Service Portal, a contingent worker would not see the HR Widget Icon:

However, if a contingent worker were to change the URL to match ESC:

They will see the portal for HR. Contingent workers will usually get only a few roles. That includes the sn_hr_sp.hrsp_contingent and sn_hr_core.hrsm_contingent. Is there something that we can do to block their access (or hide) the ESC portal specifically? We still want them to have access to the IT Service Portal.

Thanks in advance,

-Rob

[Community Alums]

Hi @Rob Sestito ,

sn_hr_sp.hrsp_contingent role is mainly responsible to have access to the portal and have you figured out from where this role is getting assigned?

[Rob Sestito]

Hey @Sandeep Dutta - 

I know what the role is doing - and SN docs say it is not recommended to modify.

sn_hr_sp.hrsp_contingent contains sn_hr_core.hrsm_contingent

I see that this role has My HR Requests in it as a module, but that shows as inactive

Unfortunately - I am not sure what you mean by "have you figured out from where this role is getting assigned?"

Are you able to provide more details or anything else as to what I can do?

Thanks,

-Rob

[Lena_Latham]

The sn_hr_sp.hrsp_contingent role is assigned automatically by the system based on the HR Profile. In this case, it provides access to the Employee Center. More about that on Docs: Client Roles

As for how to prevent access, have you seen THIS POST about restricting access via the Taxonomy? Perhaps some Can Read and Cannot Read criteria would be the solution for you.

Best,

Lena

[Rob Sestito]

Hey Lena,

Yes I am actually part of that post with an answer to their question THIS POST. HR Services/Record Producers are already doing their part with who gets access and who does not.

An easy(ish) way so far from what I am finding is using roles. I see that the sn_hr_sp.hrsp_contingent role comes with added access, one of which is the EC.

I tested with adding the hr basic role on the Portal Page properties which a contingent workers does not have. However, that only blocked them from see the main page dashboard. They were still able to look at the dropdown mega menu, footer, etc. That is not what I need - I need the entire page to not be found. 

Thank you,

-Rob