User role examples
User roles are a predefined set of permissions that can be applied to a user or a group of users, so they will have the same access permissions. To discover more about configuring detailed access controls including user roles, see Detailed access control. Access can be provided to users by assigning them the same role (i.e., the same predefined set of permissions) for instructions on how to assign user roles to users, see Managing users
In this section you will examine examples of user roles, with different types of access to the system, illustrating various access levels to the system, based on real-world scenarios including:
The recruiter, who is responsible for hiring and compensation negotiations.
The middle manager, who is responsible for compensation levels within a specific department or team.
The local HR admin, who is responsible for one single country, as opposed to full global access.
The admin user.
Use case 1: the recruiter
In this section, we will examine the use case of recruiter with limited access to the Compensation Assistant.
The scenario is the following: you want your people in recruitment to have access to the Compensation Assistant so that they can get fair salary suggestions for new employees and see how that salary suggestion compares to comparison groups and external benchmarking data, without them being able to see details for individual employees. You have attached the “Compensation” label to all data sets that this user should have access to.
The relevant access control settings should look like this:
Recruiter permission set
Use case 2: the middle manager
In this scenario, we will examine the case of a middle manager with limited access to a subset of data for a manager. For this situation, you want your managers to have access to the data about the employees in their department. The settings below show how this is done for the CTO who is responsible for the IT department.
The relevant access control settings should look like this:
Middle manager permission set
Use case 3: the local HR
We will now examine the example of local HR employee with limited access to local data with labels.
In this scenario, you are a global organization enrolling in pay equity analysis across all countries. As the global manager, you aim to limit each local HR team's access to only their respective country's dataset, ensuring they do not have visibility into data from other countries. The settings below show how this is done for the local HR in Spain, who should only see data for the Spanish population.
The relevant access control setting should look like this:
HR employee permission set
Use case 4: the admin user
Finally, we will look at the case of an admin user with access to all data and use management.
In this scenario, the total rewards manager, who serves as the admin user within the system, has comprehensive access to all data sets and features. This role includes the responsibility of creating and managing other user accounts.
The relevant access control setting should look like this:
Admin user permission set