COE Security Policies not working

[tworzala]

I created these COE security policies. You can't see the groups that are assigned to each but in the Policy name, those are the groups that are selected in the group section. The HR SBS & Payroll groups should see all cases which is the 2nd policy. The Benefit COE group should only see cases within the HR Payroll Case that are assigned to the Benefit COE group. When I impersonate someone from the Benefit COE group, I can see all cases within every COE. What am I doing wrong?

[Nilesh Wahule]

Hi @tworzala ,

As all other COE's are inherited from the HR Case COE, I feel that the configuration needs to be corrected. Can you make "Applies to all Child COE" Checkbox as false for all entries and make sure that last 2 Policies shown in image are required. As these will be granting access to WorkForce Admin and Total Rewards COE cases to assignment group as "Benefits COE" Group. 

Please mark my answer as helpful/correct if it resolves your query.

---

Nilesh Wahule

[tworzala]

The first 2 policies that are for HR Case COE and all inherited COEs is because HR SBS and Payroll should be able to see all cases, no matter the COE. And what do you mean by making the last 2 policies required?

[tworzala]

Did you see my latest reply? Any other help on this?

[Ravi Chandra_K]

Hello @tworzala 

Since the COE policy is on Payroll COE, The HR payroll cases are only viewable by Benefits Groups. None of the other Group can see other cases. It only applies to that COE and service. All the other COEs are not effected unless a separate policy is written on them.

It is expected behavior 

Please mark the answer as helpful and correct if helped.

Kind regards,

Ravi Chandra