Hi,
We want to upload/create users with a hire date in the future.
At the same time, we want visibility/editability to these (not yet hired) users limited to a few roles.
Eg. System admin should be able to edit this user, manager should be able to see this user, and for all other roles, the user should be hidden.
Can this be done?
And if yes, what is the best way to set this up?
thx,
Eric
Hi Eric
This could be achieved by adjusting the permissions related to users for the roles.
The default Site admin role allows the editing and viewing of users.
The default Staff manager role allows the viewing of staff without editing ability. You can access staff through the Teams menu (under Develop in later versions). This requires the manager to be assigned through the job assignment in HR Import.
You would then need to Edit the other roles you have using the User filter and make sure that there are not any permissions that allow viewing or editing of user profiles.
Note that roles like editing trainer it may be useful to view a user profile - if you untick the allow viewing profile permission this will apply for viewing all users in a course - is this what you want?
Regards
Hi Craig,
this would not solve my issue. Because at a certain point in time, the other roles should be able to view these users.
We would create the users in the system, before their starting date. At that moment: the (future) manager and full admin should be able to see this user.
But after the starting date => all other roles should be able to see the (started) new user.
Would it be possible to create a kind of new user status 'soon to start', and based on this user status, grant specific roles access to this user?
regards,
Eric
Hi Eric
Unfortunately the way permissions work is that the permission applies to everyone in the role rather than a subset of users in the role. So giving a user permission to view users means viewing all users rather than a subset of users. This applies to all role contexts except the user context which is what the staff manager role uses so the manager can only see a subset of users (users assigned as their manager)
One possibility to keep groups of users apart is multitenancy - the future users could be added to a tenant and the people who need to view or edit them added to this tenant too in a tenant role such as tenant user manager and when they start move them to the main tenant so others can see them.
This has potential to work - please note the current unsupported features of multi tenancy
Regards