banner security illustrated using oracle based security and banner hr

23
BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

Upload: dayna-fletcher

Post on 26-Dec-2015

225 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

BANNER SECURITY ILLUSTRATED

USING ORACLE BASED SECURITY

AND

BANNER HR

Page 2: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

2

Security Features Can Be Layered

What forms should a user access?

(Role)

What data on those forms should they access?

Page 3: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

3

What is the role of the user?

Director of HR

Student Payroll Manager

Access to all forms, rule and validation tables. Has view and update access.

Access to payroll forms only.

Page 4: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

4

What data should they access?

Director of HR

Student Payroll Manager

Access data for all employees at the institution.

Access to data for student employees only

Page 5: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

5

Layering

Each time you apply a role and activate a security feature, you are narrowing or limiting the access to data and access to transactions in Banner HR.

Page 6: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

6

SAMPLE INSTITUTION

HAS THREE EMPLOYER CODES

HAS FOUR EMPLOYEE CLASSES

STUDENTS WILL NOT MAKE MORE THAN $9,000/YEAR

STUDENTS ARE IN ONLY ONE ORG CODE

Page 7: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

7

Sample Institution and Sample Roles

EMPR codes

ee classes

org code

salary

1 2 3 clerical executive faculty admin 100 -299300 to

599600-899

up to $9,000

up to $99,000

ROLES:

HUMAN RESOURCES

PAY ROLL

BENEFITS AND DEDUCTIONS

TIME ENTRY ON PHAHOUR

HR DATA ENTRY

Page 8: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

8

For this example, assume you will activate all features on the installation screen PTRINST.

PTRINST

Page 9: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

9

PTRINST

SECURITY ACTIVATION

Page 10: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

10

DIRECTOR OF HR

HAS ACCESS TO ALL SCREENS IN

BANNER HR

NEEDS ABILITY TO UPDATE AND

VIEW DATA

Page 11: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

11

PTRUSER

Once the security is activated, go to PTRUSER and insert the names of those who will be granted access.

Check Master Access if appropriate.

Page 12: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

12

Notice all boxes are checked.

PTRUSER

Page 13: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

13

FOR MASTER ACCESS

NO FURTHER INPUT IS NEEDED

Page 14: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

14

STUDENT PAYROLL MANAGER

Assign a role to grant access to only those screens required for payroll

Go to PTRUSER to identify users in the system and to grant any master access levels.

Page 15: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

15

PTRUSER

Notice master access is granted for organization and salary only

Page 16: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

16

EMPR codes

ee classes

org code

salary

1 2 3 clerical executive faculty admin 100 -299300 to

599600-899

up to $9,000

up to $99,000

ROLES:

HUMAN RESOURCES

PAY ROLL

BENEFITS AND

DEDUCTIONS

TIME ENTRY ON PHAHOUR

HR DATA ENTRY

By establishing the PTRUSER and applying the role, the Student Payroll Manager now has access to:

Page 17: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

17

Important Note:

This doesn’t limit access to data...the individual security forms do that.

PSAECLS for Employee Class

PSAORGN for Organization Code

PSAEMPR for Employer Code

PTRUSER for Salary limits

PTRUSER assigns the oracle ID to Banner User name as a user in the system and you may grant master to the user which overrides the individual security forms above.

Page 18: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

18

PSAECLS

Page 19: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

19

EMPR codes

ee classe

s

org code

salary

1 2 3 clerical executive faculty admin 100 -299300 to

599600-899

up to $9,000

up to $99,000

ROLES:HUMAN

RESOURCESPAY ROLL

BENEFITS AND DEDUCTIONS

TIME ENTRY ON PHAHOUR

HR DATA ENTRY

Access is now limited to one employee class

Page 20: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

20

PSAEMPR

003

Page 21: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

21

EMPR codes

ee classe

s

org code

salary

1 2 3 clerical executive faculty admin 100 -299300 to

599600-899

up to $9,000

up to $99,000

ROLES:HUMAN

RESOURCESPAY ROLL

BENEFITS AND DEDUCTIONS

TIME ENTRY ON PHAHOUR

HR DATA ENTRY

Further limitations have now been placed to provide only the data from one of the employer codes.

Page 22: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

22

EMPR codes

ee classe

s

org code

salary

1 2 3 clerical executive faculty admin 100 -299300 to

599600-899

up to $9,000

up to $99,000

ROLES:

HUMAN RESOURCES

PAY ROLL

BENEFITS AND DEDUCTIONS

TIME ENTRY ON PHAHOUR

HR DATA ENTRY

When both “layers” are applied, access is limited to the roles and data

selected:

Page 23: BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

23

QUESTIONS?

How will you request and track access at your institution?