1. HRMS Implementation Project HRMS Security Authorization Administrator Module

2. 2 Purpose The purpose of this module is to: Provide guidance in assignment of R3/HRMS roles to positions in the Organizational structure

3. 3 Agenda Position Maintenance Resources Contact us

4. 4 Position Maintenance What is Position Maintenance? The assignment of roles and/or structural authorizations to positions in the State of Washington Organizational structure When does Position Maintenance occur? Following the creation of, or change(s) to a position in HRMS by the Agency Organizational Management Processor Who performs Position Maintenance? Security Authorization Administrator

5. 5 Security access (roles) are assigned to HR positions in the Organizational structure. Role Assignment – Determines which transactions/infotypes the end user can access in the system (collected via role mapping for cutover/conversion). Organizational Assignment – Determines which employees’ information the end user can view and/or update in the system. Default access assigned at the agency level (Level 2) unless otherwise noted (collected via organizational survey for cutover/ conversion). HRMS Position-based Security

6. 6 Organizational Structure Level 1 Level 2 Level 3 State Agency 2Agency 1 Sub-Agency BSub-Agency A For security, the state-wide organizational structure consists of the top 3 organizational levels as shown above.

7. 7 Role/Organizational Assignment State Agency 2Agency 1 Sub-Agency BSub-Agency A Position 2Position 1 Role ARole B Agency 1 Structural Data Profile One or more roles can be assigned to each position. The roles limit the screens that each position can view. The positions are assigned structural authorizations based on where they fit in the organizational structure. The structural authorization limits the position to view only data in a particular area. Role A Agency 2 Structural Data Profile

8. 8 SAP UserID Assignment State Agency 2Agency 1 Sub-Agency BSub-Agency A Position 2Position 1 Role A Role C A person is assigned to a position and inherits the structural authorizations and role assignment. The person is given a UserID. Personnel Record Role B UserID Personnel Record Agency 1 Structural Profile Agency 2 Structural Profile 1 2 3 4 Activity breakdown 1. OM Processor 2. Security Authorization Administrator 3. Personnel Admin 4. Security ID Administrator

9. 9 Sample Authorization Administrator request You have received the following requests to assign roles: Personnel Number: 00748232 Name: Salang, David J. SAP Position #: 70081902 Role(s) to assign: SR3P_1110_DATA_PROFILE (agency data profile) **This is prerequisite for BW (Business Warehouse) UserID set up Personnel Number: 00195108Name: Anderson, Margaret SAP Position #: 70081888 Role(s) to assign: SR3P_DE_PAY_INQ (decentralized pay inquirer) SR3P_1110_DATA_PROFILE (agency data profile) Once completed, you would hand off to Security UserID Administrator to complete set up of R3/HRMS and/or BW (Business Warehouse) UserIDs.

10. 10 Demonstrations Refer to Security handbook, “Security Authorization Administrator, Assign Roles to Positions”

11. 11 Agenda Position Maintenance Resources Contact us

12. 12 Resources Additional SAP Reference Materials SAP Authorizations Made Easy SAP Authorizations System Additional SAP Vendor Training SAP R3 Security Basics SAP HR Security SAP BW Security SAP Auditing http://www.sap.com/usa/education/

13. 13 Agenda Position Maintenance Resources Contact us

14. 14 Contact Us For more information: Contact the HRMS Security team (via DOP Help Desk email) at: HelpDesk@DOP.WA.GOV