Personnel Management with Manage Permission

1. Version

2. Application scenarios

The super administrator assigns the management authority of "User" to "department/role/person", and the object with the authority will become a sub-administrator.

• The sub-admin can add/delete/modify some departments

• Secondary administrators can delete/modify some roles

• Secondary administrators can add some roles/departments to some members

Example in this chapter: Assign department/role "Management" permission to user "eoco", so that eoco can manage users on the "Manage  > User" page.

1. Enable hierarchical authorization

Log in to the data decision-making system in Supermanager, click "Manage > Permission >Global Setting", open the "Hierarchical Authorization" button, and click "Save", as shown in the following figure:

Note: To assign the "Personnel Management" authority, the "Grade Authorization" button must be enabled.

2. Configure personnel management rights

The administrator logs in to the data decision system, clicks "Manage > Permission > General permission configuration", and selects the rights carrier "Department/Role/User". In this example, the user eoco is selected.

Select the "Personnel Management" tab, and configure the "Manage" permissions of the department "Human Resources" and the role "Common Role" for eoco, as shown in the following figure:

3. Configuration management system permissions

The administrator logs in to the data decision system, clicks "Manage > Permission > General permission configuration", and selects the rights carrier "Department/Role/User". In this example, the user eoco is selected.

Select the "Manage" Tab to configure the "Use" permission of the "User" module for eoco, as shown in the following figure:

Note: There is a relationship between the "User" authority and the "User Management Submodule" authority.

4. Effect View

User eoco logs in to the data decision system and clicks "Manage> User" to manage authorized users/departments/roles. As shown below:

The objects that can be managed by the secondary pipe are:

• Users: users in departments with permissions, users in roles with permissions, users added by themselves and not assigned to other departments/roles without permissions by the super administrator.

• Department: The department with authority, and the subordinate departments and positions of the department.

• Role: a role with permission, a role that is added by yourself and whose usage permission has not been cancelled by the super administrator.

If all permissions of "User Management" are enabled, the operations that can be performed by the secondary administrator are as follows:

1. Global settings

• The secondary management does not support the "Global Settings" of "User".

2. All users

• Supports manually adding/importing users from secondary management, but does not support synchronizing users . When adding a user, the secondary manager can configure the asynchronous department with permission, asynchronous role with permission, and the newly added role.

• Support secondary administrators to edit information, disable users, and delete users for authorized users, as shown in the following table:

3. Institutional sectors

• No operations are supported for synchronizing department titles.

• Support renaming/deleting permissioned asynchronous departments.

• Supports adding/deleting/editing subordinate departments and asynchronous positions to the authorized asynchronous departments.

• Supports adding/deleting/editing users to non-synchronized departments and non-synchronized jobs with permission. 

4. Roles

• No operations are supported on sync roles.

• You can add asynchronous roles/delete privileged asynchronous roles/edit privileged asynchronous roles.

• Users can be added/deleted/edited to authorized asynchronous roles and roles that are added by yourself and whose usage rights have not been cancelled by the super administrator.

5. Platform users

• Unable to enable/disable the "Restrict User" button for user category.

• If "Restricted Users" is turned off, no operations can be performed.

• If "Restricted Users" is enabled, the secondary administrator can configure user classifications for authorized users.