Remove HR Administrator role from IT System Administrator

After system configuration, remove the HR Administrator role from IT System Administrator to prevent the IT System Administrator from viewing sensitive HR information. This will ensure that only the HR Administrator [sn_hr_core.admin] has access to the sensitive information.

Before you begin

Role required: admin with sn_hr_core.admin

Make sure that you have at least two users with the HR Administrator role. If you assign only one person with the role and that person is deactivated, you will not have a user to perform the HR admin duties.

Note:

The Employee Center administrator [sn_hr_sp.esc_admin] role is also contained in the IT System Administrator [admin] role. See to it that someone in your organization has the Employee Center administrator [sn_hr_sp.esc_admin] role to perform the Employee center duties in the absence of IT System Administrator.

Procedure

1. Log in as admin.
2. From User Administration, go to Roles (left navigation menu).
3. Click admin.
4. From the Contains Roles tab, click Edit.
5. From the Contains Roles List column, highlight and move sn_hr_core.admin to the Collection column.
   Note:

   Also, remove other scoped HR Admin roles, such as sn_hr_le.admin.
6. Click Save.
7. Log out.

What to do next

After removing the HR administrator role from IT System Administrator, log out and log back for the changes to take effect.

Note:

Ensure that you have completed the setup before removing the HR Administrator role from IT System Administrator.

All HR scheduled jobs will run as usual even after the HR Administrator role is removed from the IT System Administrators.