Employee's manager with no editing rights in the web shop

Hi,

The Managers can do this because of the default permissions groups assigned.

There is more on this here:

https://support.oneidentity.com/identity-manager/kb/262293/how-to-grant-access-to-edit-or-add-employees-in-it-shop

This would be the best way to update the portal to allow for what you'd like.

Trevor

Hello Trevor,

thank you for you answer.

I tested the KB262293 with success but now, on the overview page for the person, his manager cannot see the tiles of Requests, Entitlements, Attestation Risk anymore.

This way the manager cannot revoke employee's entitlements anymore. It seems not correct to me.   

Thanks

Giuseppe

So I assume you changed the value for "Employees which can be edited by the current user" and this does not include Managers?

Can you tell me what you changed exactly?

You said you want "manager only view their employees while only some specific employees can add, edit (all) employees and assign a new manager?"

So I assume you did not add the Managers to "Employees which can be edited by the current user"?

Depending on your where clause you may need to edit the actual permissions so that managers can view only, while other users can actually edit.

Trevor

So I assume you changed the value for "Employees which can be edited by the current user" and this does not include Managers?

Can you tell me what you changed exactly?

You said you want "manager only view their employees while only some specific employees can add, edit (all) employees and assign a new manager?"

So I assume you did not add the Managers to "Employees which can be edited by the current user"?

Depending on your where clause you may need to edit the actual permissions so that managers can view only, while other users can actually edit.

Trevor