Answered

Limit access IT Administrator To Employee details

  • 16 November 2021
  • 5 replies
  • 104 views

Userlevel 1
Badge

Dear Personio Support Team,

Would be possible to limit the access to the Employees Details by the Administrator? 

Is saw a question already about notes. But in my humble opnion as an IT admin I also feel I have no business in Salary information. And I think there may be more details that as an IT admin I should have no access to.

The simplest way would be to duplicate the admin Role and disable functions that IT should not have access to. But I noticed that Duplicating the Role of Administrator does not copy it’s access rights.

What is needed is a role that can perform all tasks but is restricted to view or edit sensitive employee details.

 

Thank you.

icon

Best answer by Marc 17 November 2021, 11:21

View original

5 replies

Userlevel 4
Badge +12

Hi @Bjorn,

congrats on your first question in the community!

You are right: generally speaking, IT Admins don’t need as many access rights as an HR Admin in Personio. What you can do is to create an additional employee role and assign it only the access rights that you require.

From my experience with other customers, IT requires much fewer rights than what is preset in the admin role, which include several rights for editing HR related matters such as absences, attendance, salaries (as you already mentioned), and so on (for sure depending on what you need to set up in Personio).
So feel free to try out my suggestion.

If you see it a bit differently here, you can submit an idea that will be redirected to our Product Team as product feedback. If you do, you can explain why you want to be able to duplicate admin rights to another role as you describe.

Here is an article on how to post an idea in the community:


If there are any open questions from your side, feel free to ask. I am here to help.

Best wishes
Marc
 

Userlevel 1
Badge

Thanks for your anwser Marc,

We have set up a IT Role. But for that role we find ourselves unable to add the right to, for example, create or edit roles. Which we think could very well be a task for IT. Could be we are not looking at the right place but the option to create / edit roles seems not to be there.

 

regards Bjorn

Userlevel 4
Badge +12

Hi @Bjorn,

there are a few rights that are exclusively for the admin role and editing employee roles is one of those. 

The reason for that is that theoretically someone with a limited role but with access rights for editing roles could easily just change their own role settings and that is not intended.

Best regards
Marc

Userlevel 1
Badge

I completly understand that. But the current work around is giving that someone admin rights. Which imho is worse.

For now i will submit a request for that. Thanks for you answers an time.

 

regards Bjorn

Userlevel 6
Badge +15

Here is @Bjorn’s idea.

If anybody is interested in this setting, make sure to open it and upvote it:

 

 

Best,
Daniele

Your reply