Admin section permission
On the Admin/Manage Users/User Access/Admin section, we have added new permissions to improve the Admin access, please follow the below-attached screenshot for the newly added permissions:
The functionality of the above-attached screenshot permissions:
“Can access the Admin section” permission:
After enabling the above-attached screenshot permission for the users then the users should be able to see only Admin/Manage Users tab and not all other tabs
Note: To verify the functionality of permissions available under the “Can Access the Admin section” permission we need to enable the “Can access Admin section” permission first.
“Can access only own Employee Records” permission:
After enabling the above-attached screenshot permission then the user should not be able to access all user records they will be able to access only their own record.
“Can access all Other Employee Records” permission:
After enabling the above-attached screenshot permission user should be able to access all other users but not access his own records.
“Can Access only Assigned Employee Records” permission:
After enabling the above-attached screenshot permission the logged user should be able to see those user lists where the logged user is assigned as Manager on the HR/Roles section
“Can access Admin > All Other Menus” permission:
After enabling the above-attached screenshot permission user should not be able to see the Manage Users tab but able to see the other Admin tabs
Combination of “Can Access only Own Employee Records” and “Can Access all Other Employee Records” permissions:
After enabling the above two permissions combinations user should be able to access his own record as well as all other users’ records
Combination of “Can Access only Own Employee Records” and “Can Access Only Assigned Employees Records” permissions:
After enabling the above two permissions combinations user should be able to access his own record as well as should be able to see those user lists where the logged user is assigned as Manager on the HR/Roles section
Below highlighted permissions combination should not exist user should not be able to enable these two permissions together.
9. Below-attached screenshot permissions combination should not exist user should not be able to enable all the permission together:
10. Restricts User permission:
A user can be set to have access to the admin section but hide the section from where they can change the permission by simply unticking "Can Add/Edit users" from User Modify as shown below:-
Once the permission is unchecked, User Access, User View, and User Modify are hidden on their profile.