When creating a company user, there is an option to assign them as admin level rights where admin users can view, edit, delete, change EVERYTHING within the company. Why does this matter?
In HRWize, when an employee wants to request time off, for example, they need to use Self Service and submit the request. As part of this process, there is a workflow that sends the request to their manager for approval and, until the manager approves the request, it is set to "Awaiting approval".
As an administrator, the employee does not need to use Self Service to add time off. They can simply go to the main "Time off" module and enter their own time off which is then automatically approved. There is no workflow so their manager won't have to approve the request and may not even know the request has been entered unless they specifically checked.
Even if the admin level user did use Self-Service to enter their time off and it was approved by their manager, the admin user could then go to the main Time Off module and edit or delete the request, again, with no notification or workflow going to a manager.
Furthermore, an admin user can view everything, access their managers (and even higher than their managers) pay and benefits details and could change these. Please note that no notification or approval is required.
We STRONGLY recommend that you do not assign admin level rights to any employee. If you do assign admin rights, we recommend you only give these to someone in a very senior position (i.e. as close to the top as possible) so they do not get access to information which your company may not want them to have access to.
HRWize
Comments