Fairsail supports four types of access control. Together these tightly control access to highly confidential HR data whilst giving maximum access for data that needs to be shared.
Access Controls
By Reporting Lines
This gives access for each employee (or team member) to their own Fairsail information and to the information of people that report to them. These access controls are the core of the Fairsail self-service workflows. The access granted differs for each HR workflow and changes during the lifetime of the workflow. For example: a performance review is only visible to an employee after HR approval and release by the manager. Cross-reporting or dotted-line managers may share access with the primary manager.
By HR Department
Enables multi-country or multi-business unit visibility of data for local HR teams. It also enables special functions such as finance or training to gain cross-division or cross-company visibility of data specific to their need. All team members are assigned to an HR Department. HR administrators are granted read or read-write access to team members to those departments.
By User Profile
Gives granular control of access right down to the object and field level of data. Used within Fairsail to fine tune data access.
By Group
Access can be granted to groups of users. This is primarily used to control access to dashboard, report and email template libraries.
Access profiles control access to Fairsail at a number of different levels:-
- To team member workflow data objects.
- To system objects such as report libraries.
- To individual data objects, such as salary information or training records.
- To individual fields, such as social security number and date of birth.
Combinations of all of the above are used to give different levels of access. So that, for example, a training manager will have access to skill, competency, development need and training data across the whole company. An HR administrator will have full access to data for one or more countries or departments. Team members and managers are locked out of all employment data except via workflow.
