banner security illustrated using oracle based security and banner hr

BANNER SECURITY ILLUSTRATED

USING ORACLE BASED SECURITY

AND

BANNER HR

2

Security Features Can Be Layered

What forms should a user access?

(Role)

What data on those forms should they access?

3

What is the role of the user?

Director of HR

Student Payroll Manager

Access to all forms, rule and validation tables. Has view and update access.

Access to payroll forms only.

4

What data should they access?

Director of HR

Student Payroll Manager

Access data for all employees at the institution.

Access to data for student employees only

5

Layering

Each time you apply a role and activate a security feature, you are narrowing or limiting the access to data and access to transactions in Banner HR.

6

SAMPLE INSTITUTION

HAS THREE EMPLOYER CODES

HAS FOUR EMPLOYEE CLASSES

STUDENTS WILL NOT MAKE MORE THAN $9,000/YEAR

STUDENTS ARE IN ONLY ONE ORG CODE

7

Sample Institution and Sample Roles

EMPR codes

ee classes

org code

salary

1 2 3 clerical executive faculty admin 100 -299300 to

599600-899

up to $9,000

up to $99,000

ROLES:

HUMAN RESOURCES

PAY ROLL

BENEFITS AND DEDUCTIONS

TIME ENTRY ON PHAHOUR

HR DATA ENTRY

8

For this example, assume you will activate all features on the installation screen PTRINST.

PTRINST

9

PTRINST

SECURITY ACTIVATION

10

DIRECTOR OF HR

HAS ACCESS TO ALL SCREENS IN

BANNER HR

NEEDS ABILITY TO UPDATE AND

VIEW DATA

11

PTRUSER

Once the security is activated, go to PTRUSER and insert the names of those who will be granted access.

Check Master Access if appropriate.

12

Notice all boxes are checked.

PTRUSER

13

FOR MASTER ACCESS

NO FURTHER INPUT IS NEEDED

14

STUDENT PAYROLL MANAGER

Assign a role to grant access to only those screens required for payroll

Go to PTRUSER to identify users in the system and to grant any master access levels.

15

PTRUSER

Notice master access is granted for organization and salary only

16

EMPR codes

ee classes

org code

salary

1 2 3 clerical executive faculty admin 100 -299300 to

599600-899

up to $9,000

up to $99,000

ROLES:

HUMAN RESOURCES

PAY ROLL

BENEFITS AND

DEDUCTIONS

TIME ENTRY ON PHAHOUR

HR DATA ENTRY

By establishing the PTRUSER and applying the role, the Student Payroll Manager now has access to:

17

Important Note:

This doesn’t limit access to data...the individual security forms do that.

PSAECLS for Employee Class

PSAORGN for Organization Code

PSAEMPR for Employer Code

PTRUSER for Salary limits

PTRUSER assigns the oracle ID to Banner User name as a user in the system and you may grant master to the user which overrides the individual security forms above.

18

PSAECLS

19

EMPR codes

ee classe

s

org code

salary

1 2 3 clerical executive faculty admin 100 -299300 to

599600-899

up to $9,000

up to $99,000

ROLES:HUMAN

RESOURCESPAY ROLL

BENEFITS AND DEDUCTIONS

TIME ENTRY ON PHAHOUR

HR DATA ENTRY

Access is now limited to one employee class

20

PSAEMPR

003

21

EMPR codes

ee classe

s

org code

salary

1 2 3 clerical executive faculty admin 100 -299300 to

599600-899

up to $9,000

up to $99,000

ROLES:HUMAN

RESOURCESPAY ROLL

BENEFITS AND DEDUCTIONS

TIME ENTRY ON PHAHOUR

HR DATA ENTRY

Further limitations have now been placed to provide only the data from one of the employer codes.

22

EMPR codes

ee classe

s

org code

salary

1 2 3 clerical executive faculty admin 100 -299300 to

599600-899

up to $9,000

up to $99,000

ROLES:

HUMAN RESOURCES

PAY ROLL

BENEFITS AND DEDUCTIONS

TIME ENTRY ON PHAHOUR

HR DATA ENTRY

When both “layers” are applied, access is limited to the roles and data

selected:

23

QUESTIONS?

How will you request and track access at your institution?