Need information on who can decrypt/ view thevalues on National Tax ID field in HR Profile.

[Sharmili2]

Hi,

   I recently came to know about the National Tax ID field (San Diego release) in the HR Profile table (similar to SSN) with the ability to encrypt the values . But we couldn't figure out how and who can Decrypt/ view the values in that field. Does anyone know about this?. Any help would be appreciated.

Regards,

Sharmili

[Arav]

Hi,

Anyone with the role "sn_hr_core.secure_info_reader" will be able to read the contents in this field.

Please check the ACL below in your instance for more details. Admin overrides is unchecked by default as expected.

https://<your instance>/sys_security_acl_list.do?sysparm_query=operation.name%3Dread%5Ename%3Dsn_hr_core_profile.national_tax_id_encrypted&sysparm_view=

Thanks,

Arav

[Sharmili2]

Hi Arav,

     Thanks for your response. I also checked the same ACL and the role but even with 'sn_hr_core.secure_info_reader' and 'sn_hr_core.secure_info_writer' role, I couldn't see those values. I believe the values should be visible on the field itself. Will there be any other reasons?

Thanks,

Sharmili

[Sharmili2 · Accepted solution]

Hi Arav,

    I am now able to view the contents in National Tax ID field, just not directly in the field but with the help of a script.

Regards,

Sharmili

[Community Alums]

Sharmili, can you share what script you are referring to?

I really don't see the purpose of this feature.   If it's just storing SSN encrypted and in a password field it really doesn't help if agents can't view the data to do their job.   Documentation is terribly lacking on this new feature.  We need to produce a scheduled export to another system and it must include SSN.  Docs says the legacy SSN field is still there too but on new systems I don't see it.

Also, the ACLs have nothing to do with seeing the content in the field.   They only govern if you can see/edit the field.