Meaning of Read/Write in COE Security Policy.

Pavani131 · ‎08-26-2022

Hi All,

I want to understand the meaning of type read/write in COE Security Policy.

When we give the type as read ->only members of given assignment group will able to read(cases)?

When we give the type as write ->only members of given assignment group will able to write(edit cases)?

Please correct me. Any help would be appreciated.

Thanks.

Community Alums · ‎08-26-2022

HI @RITHIKA NEEMKAR ,

When you give "Read" access, to a COE, then the Group which you have selected in the COE configuration not Assignment group would be able to "Read" the Cases from the selected HR services(Provided you have not checked on "Applies to All).

Same Goes with "Write" Access, When you give "Write" access, to a COE, then the Group which you have selected in the COE configuration not Assignment group would be able to "Write" the Cases from the selected HR services(Provided you have not checked on "Applies to All).

For Example , see below:

If you see from Above, "Hotel Services Group" will have "read" access to all the HR Services linked with this COE.

The group creation be followed from this doc :Create groups

Mark my answer correct & Helpful, if Applicable.

Thanks,

Sandeep

View solution in original post

Susan Britt · ‎08-31-2022

Your COE Security setup is restricted to one HR Service (e.g., Employee Profile Update) on the HR Workforce Admin table. This means only this one service is restricted to the one group you selected. All other services on this COE can still be read and updated by any group and user with HR access (i.e., sn_hr_core.basic role). OOB any user with the sn_hr_core.basic role can read and write to any COE table in the HR core scoped app. The COE Security is there to override that access. For example, you want to restrict the Payroll COE to where only members of the Payroll group can read and write - you would need to create a read and write COE Security Policy on the COE table (sn_hr_core_case_payroll) and add only the Payroll group to it. This means only payroll can see payroll cases, and all HR groups/users can still read and write to all other COEs.