BANNER SECURITY ILLUSTRATED USING ORACLE BASED SECURITY AND BANNER HR

2 Security Features Can Be Layered u What forms should a user access? (Role) u What data on those forms should they access?

3 What is the role of the user? u Director of HR u Student Payroll Manager  Access to all forms, rule and validation tables. Has view and update access.  Access to payroll forms only.

4 What data should they access? u Director of HR u Student Payroll Manager  Access data for all employees at the institution.  Access to data for student employees only

5 Layering Each time you apply a role and activate a security feature, you are narrowing or limiting the access to data and access to transactions in Banner HR.

6 SAMPLE INSTITUTION u HAS THREE EMPLOYER CODES u HAS FOUR EMPLOYEE CLASSES u STUDENTS WILL NOT MAKE MORE THAN $9,000/YEAR u STUDENTS ARE IN ONLY ONE ORG CODE

7 Sample Institution and Sample Roles

8 For this example, assume you will activate all features on the installation screen PTRINST. PTRINST

9 SECURITY ACTIVATION

10 DIRECTOR OF HR u HAS ACCESS TO ALL SCREENS IN BANNER HR u NEEDS ABILITY TO UPDATE AND VIEW DATA

11 PTRUSER u Once the security is activated, go to PTRUSER and insert the names of those who will be granted access. u Check Master Access if appropriate.

12 Notice all boxes are checked. PTRUSER

13 FOR MASTER ACCESS u NO FURTHER INPUT IS NEEDED

14 STUDENT PAYROLL MANAGER u Assign a role to grant access to only those screens required for payroll u Go to PTRUSER to identify users in the system and to grant any master access levels.

15 PTRUSER Notice master access is granted for organization and salary only

16 By establishing the PTRUSER and applying the role, the Student Payroll Manager now has access to:

17 Important Note: u This doesn’t limit access to data...the individual security forms do that. PSAECLS for Employee Class PSAORGN for Organization Code PSAEMPR for Employer Code PTRUSER for Salary limits u PTRUSER assigns the oracle ID to Banner User name as a user in the system and you may grant master to the user which overrides the individual security forms above.

18 PSAECLS

19 Access is now limited to one employee class

20 PSAEMPR 003

21 Further limitations have now been placed to provide only the data from one of the employer codes.

22 When both “layers” are applied, access is limited to the roles and data selected :

23 QUESTIONS? How will you request and track access at your institution?