Page Comparison

The following row-based security has been implemented with the Employee Activity Hub (EAH) on top of standard Activity Hub security.

• UCPath transactors: EAH data access mirrors role and row-level security access in UCPath.
• EAH data consumers and EAH report developers who are not UCPath transactors: data access must be requested and approved as part of an exception provisioning process.
• Labor Ledger data: all approved EAH data consumers and report developers have access to all rows.

...

1. Running an EAH report without row-level security that has been built by your local report developer: ask your developer what Active Directory (AD) group your DSA should add you to in order to gain access to the report.
2. Running HR/Payroll reports found at reports.ucsd.edu: fill out the UCPath Reports Access Request form to request:
   1. Access to HR/Payroll reports. Repeat for each group.
   2. DOPE and UCPath-Oracle Salary Reconciliation access.
   3. Additional departmental access.
3. Building reports in Cognos or Tableau using EAH: complete the Employee Activity Hub Report Developer Access Request.
   1. EAH Report Developers can request additional departmental access via this form.
4. Running an EAH report built by your local report developer that relies on row-level secured view(s): fill out Employee Activity Hub Report Consumer Access Request and request your report developer add you to the AD group that has access to their reports.
   1. EAH Report Consumers can request additional departmental access via this form.
5. Running the HR/Payroll report and developing EAH reports: fill out both #2 and #3 from above.
6. Running local EAH reports and developing EAH reports: fill out both #3 and #4 from above.
7. Running HR/Payroll reports, running local reports and develop EAH reports: fill out #2, #3 and #4.
8. Developing data integration: read this page and follow the steps: https://ucsdcollabcollab.atlassianucsd.netedu/wiki/display/AH/How+to+Get+Activity+Hub+Data

Viewing reports that use blended data

...

If your report uses a row-level secured view, the consumer will need to complete a Reports Access Request specifying which additional departmental access they need.

Questions

When

...

November 9, 2020

...

was this security implemented?

November 16, 2020

What EAH views do not require row-level security?

The EAH

...

Quick Start Guide summary page has a table with a column that indicates if the view has row-level security.

Will I be able to see people who are not 100% in my requested department?

...

Note:  In order to maintain one row per person for specific views, such as EAH-AbsenseDetail-View, only the primary position for the employee will be seen.  It may appear that you are seeing employees outside of your department, but if you look at those employees in EAH-Workforce-View you will see your approved department listed as non-primary for those specific employees.

How will people look up salaries across campus for grant application? Some requests may be needed within 24 hours for turn around.  A consumer would need to see the title and salary in order to fill out their grant application and would need access to all of campus.

The consumer can now use reports built from Labor Ledger views to see results for all of campus.

How will this impact the data integration processes? 

...