https://netsuiteprofessionals.com logo
Join Slack
Powered by
Didn't NS use to have a permission that restricted...
# administration
c
Didn't NS use to have a permission that restricted users form providing access, but did enable them to edit the employee record? It all seems to be tied up in the Employee Record Permission now I thought it used to be called something like Login Access
s
permission is setup> manage users. Employee record permission was always completely separate than the access control
c
The user only has Employee Record - Full and is able to provide access to all users except admins
s
check if the user role have the setup>manage users permission. Also look at user's global access section in the employee record.
c
They didn't have Manage users, but you know what I am logging into the role myself so maybe it's because of my global access. I will test using their account in SB and see what happens
s
there are two permission sets now • Employees - manages employee records • Employee Record - Suiteanswers 75024
c
Looking at this we do not have advanced employee permissions currently. I logged as the user on a role that only has employee record as full and manage user is not selected as a permission under setup. What global access under the employee record are you referring to?
s
message has been deleted
c
I am guessing that is part of advanced permissions? We only have Roles and History
Yea just checked enable features we do not have global permissions on
s
c
yea I have looked at that but it really seems like access is tied to that employee record permission. I changed it to EDIT and I could still modify access to users as long as they aren't admins
message has been deleted
message has been deleted
s
this is a crazy flaw - I have tested that in my dev acct
c
Just to be clear it's also occurring in your account as well? I guess I'll reach out to NS about this
Just found this suiteanswers so it seems to be intended
When a user is granted Edit access for Employee Record permission, users will also have the ability to Give Access to new or existing employees. There is no specific permission to restrict a user from providing access. Alternatively, you can hide the Access subtab by creating a Custom Form for a specific role. SA - 45106
so their solution is to remove the tab from a custom form
s
that's a jerry rigged solution, used to have a distinct permission for access control - login Access and Manage User
c
ok so I am not crazy. I could have sworn there was another permission called login access or something
s
what if someone forgets to remove the select custom form field from the form, then any role with access to employee record will able switch and use the un hidden form and mess up with access control
c
Yea it's very clunky. I submitted a ticket to get more clarification
Talked to NS support but as expected they want to take it off line and they just told me the things I already read. I am really interested to see if something changed but everything i see is about the employee record being updated in 2018
Open in Slack
PreviousNext
Powered by