Fort Bragg Civilian Personnel Advisory Center June 2014 DCPDS User Account Types Determining Access Needs
One of the most important considerations when requesting access to human resources automation tools is whether or not the access is really required. The HR automation tools give users access to a wealth of personally identifiable information that should only be accessed on a strictly need to know basis. If it is determined that the user has a need to know and legitimate work function that requires access, you should then determine exactly what the person needs to be able to do in the system. Different account types granted different functions. Once it is determined that the user has a need to know and requires an account to complete essential work functions, you should determine what is the minimum level of access needed. This includes the account type and the organizational codes that you are requesting access to. Need to Know Minimal Level of Access Required Required Functions Determining the Need to Know Do they really need access?
What’s the most appropriate account type? Determining the Account Type PERMISSIONS ARE ASSOCIATED WITH THE PERSON NOT THE ACCOUNT Initiator- Can initiate (Create) an RPA Requestor- Can Request the RPA. If a user has just initiator they can create an RPA, but it cannot be routed back to them MGA (Civilian DoD Administrative) MGR (Civilian DoD Manager) Initiator- Can initiate (Create) an RPA Reviewer- Can review the RPA before it is sent forward. This permission is only given to Resource Managers. RMM (Civilian DoD Resource Manager) Initiator- Can initiate (Create) an RPA Requestor- Can Request the RPA. If a user has just initiator they can create an RPA, but it cannot be routed back to them. Authorizer- Managers often refer to this as Approver. This is the person who Authorizes the RPA to be Approved MGR & RMM 4 This permission is for Resource Managers who also manage employees. Initiator- Can initiate (Create) an RPA Initiator- Can initiate (Create) an RPA Requestor- Can Request the RPA. If a user has just initiator they can create an RPA, but it cannot be routed back to them. Authorizer- Managers often refer to this as Approver. This is the person who Authorizes the RPA to be Approved.