Granting Employee Account Access to the System: General Information

This knowledge center article will cover information about how Security profiles and groups will function in the system to assist your company with understanding how to grant manager/administrator access. Both security profiles and groups MUST be used together to grant correct employee access to manager/administrator personnel. 

Definitions:

1. Security: Profiles drive what an employee profile can do in the system.
   
2. Groups: Drive individual manager access to specific employee profiles. 
   
1. Plus, groups have additional security parameters for customizable functionality. 
   

To better understand the difference between a group and security profile, consider the following:

1. Security Profiles: Security profiles establish what I can do. Even though group permissions give me access, I still need to have my security profile configured to coordinate with my group permissions. I might have group permission to edit my employee profiles, but I still need the Employee Information (My Team) permission set in my security profile to have the menu option and then perform the edits.
   
2. Groups: Groups establish who I can see which contains additional access options. 

Types of typical Security profiles:

This section covers the most common types of security access. 

1. Employee: offers limited access to the system and grants access to view and sometimes edit personal information. 
   
2. Manager: offers moderate access typically to manage employees' time, including approving timesheets, time-offs, and time change requests, and likely grants more security depending on how your company had Green Leaf implement the "Manager" types of security profiles.
   
1. NOTE: this grants access to do this, but not access to the employee profiles (groups).
   
3. Administrator: offers most access to the system in which would include, editing employee profiles, time management, scheduling, recruitment, payroll, etc. 
   
1. NOTE: this grants access to do this, but not access to the employee profiles (groups). 
   

Types of Groups

This section covers the most common types of group access. 

1. Manager Groups: manager groups can be found in employee profiles in the "Managers" widget as seen below. When a manager profile is assigned to another employee profiles as a manager, then that manager profile will have access to view that employee.
   
   
1. Note: if the manager's Security profile doesn't grant permission to view employee data, then the manager will not have viewing access. 
   
2. Account Groups: This can be found by navigating to the hamburger menu > Cog icon > Global Setup > Groups > Edit. 
   
1. Types of common groups include all-access to all employees, specific EIN access, robust filter access, group auto-assigning, and more. 
   
1. Note: a filtering example may be that an administrator has access to all employees but the executive class. 
   
2. Note: if the manager's Security profile doesn't grant permission to view employee data, then the manager will not have viewing access. 

Common Types of Access

See the articles below to grant access security and employee profiles access for these most common types of scenarios. 

1. Granting manager access: https://greenleafbizsolutions.zohodesk.com/portal/en/kb/articles/granting-a-manager-access-to-employees
1. Note: this would be for approving timesheets, time-offs, and time change requests, and likely more depending on how your company had Green Leaf implement the "Manager" types of security profiles
   
2. Granting administrator access: https://greenleafbizsolutions.zohodesk.com/portal/en/kb/articles/granting-administrator-access

• Related Articles

• Granting Administrator Access

  This knowledge center article will cover how to grant the administrator profile access to allow them to perform advanced functions for their employees. Examples of this can be approving employee timesheets, time-offs, time change requests, running ...

• Locked Employee Account Troubleshooting

  This article will cover how you can troubleshoot in the event that an employee's account becomes locked out. We will first review how you can determine the current reason an employee is locked out as well as how you can look at historical lock out ...

• System Access Prevents Adding Time

  If a manager is receiving the error "system access prevents adding time" when trying to approve an employee's time off. It means the group permissions did not give the manager access. Please see the steps on the solution below. Go to: Company ...

• Multi-Client Access (MCA) Overview

  Multi-Client Access or "MCA" is a term used when accounts have common ownership that would constitute all accounts to be accessed from a single sign-on and allows for reporting to be pulled across all entities at one time. Additional entities can be ...

• Granting Manager Access

  This knowledge center article will cover how to grant the manager profile access to allow them to perform basic functions for their employees. Examples of this can be approving employee timesheets, time-offs, time change requests, and likely more ...