Steps for Denying/Deleting an Employee-Level Role

Users assigned to a role may have access to screens and functionality they should not be able to access. These roles can be denied or deleted from the employee record.

• If the role is assigned to the employee through the Organization Unit screen, the role must be added to the employee Role screen with the access set to Denied.

• If the role is inherited by the employee through the Roles screen, the existing role can be updated to be Denied.

  Note  

  Be sure that the user will still be able to access required screens if the role is removed. Multiple screens and/or functions may be granted to users with a single role.

Roles Directly Assigned to the Employee:

Deleting the Role

1. Click on the Employee button in the tool bar.

2. Using the Employee Search screen, locate the employee whose role is to be updated.

3. Select the Roles button in the employee Actions pane.

4. In the listing of employee-assigned roles, check the box to the left of the role to be deleted.

5. Click on the Delete Selected button in the Role Actions section of the left pane.

6. The role is removed from the employee record.

Denying the Role

An alternative method is to deny the role.

1. Click on the Employee button in the tool bar.

2. Using the Employee Search screen, locate the employee whose role is to be updated.

3. Select the Roles button in the employee Actions pane.

4. Open the record.

   • Set the Denied field to Yes and save the record.

   • The role still appears in the employee Roles screen. There is a check mark in the Is Denied column to indicate the role is no longer assigned.

Roles Inherited through the Organization Unit Screen:

1. Click on the Employee button in the tool bar.

2. Using the Employee Search screen, locate the employee whose role is to be updated.

   To view inherited roles, from the Employee Sections, select the TCS screen. Open the Employee Authorization Information card, then select the Role tab. All the roles assigned to the employee are listed, including the source where they were assigned.

3. Select the Role option from the Employee Sections in the left pane and click on Add.

4. Enter the Classification and Authorization Role Code for the role that is to be denied.

5. Set the Denied field to Yes.

6. Save the record.

7. The denied Authorization Role is now listed in the grid with a check mark in the Is Denied column.

8. Go to TCS > Employee Authorization Information > Role. Notice that the role has been removed.

9. Repeat steps 4 - 7 for each role to be removed from the employee record.

   Note  

   To reinstate this role, open the Role screen and check the box to the left of the record to be reinstated. Click on the Delete button. The denial is removed and the role is assigned to the employee.

The following related topics are available: General Data Access Steps for Adding an Employee Level Role