Creating Global permissions with Exclusions

Why would you set up a global permission with an exclusion?

In a lot of organisations, some roles require wide access or authority over all employees, but there may be important exceptions to these permissions, generally for hierarchy reasons. Giving someone full access without limits can cause problems, so having exclusions in place is really important.

Example 1: HR Leave Approvals

Your HR team might have the authority to approve leave requests for all employees worldwide. However, if this permission is granted without any restrictions, HR could also approve leave for directors, CEOs, or other top executives. This could lead to conflicts of interest or a breach of company policies. By granting HR global leave approval rights but excluding directors and CEOs, HR retains access to manage leave for most employees while respecting the privacy and authority of senior leadership.

Example 2: Scheduling Training Sessions

The HR team in charge of training may have global permission to schedule sessions for all employees. However, some departments, such as Nursing, handle their own training schedules because of specific compliance needs. Excluding the employees who fall under the Nursing department from the global scheduling access allows the HR team to manage training for the rest of the organization without disrupting department-specific processes.

Setting up Global Permissions with exclusions

Below are the steps to set up a global permission with exclusions.

• 1. Go to the Permissions section.

     

      

  2. Select the access level or the employee the permission will apply to.

     

      

  3. Click Add Permission.

     

      

  4. Select the Permission.

      

  5. Under Select Employees, add the employees you want to exclude from the global permission. Select Exclude.

      

  6. The Global option will now be automatically selected by default.

      

  7. Click Save.

      

Editing a global permission to include exclusions

In some cases, permissions may have originally been set to "global" during creation and assignment. While this may have made sense at the time, global permissions might no longer be suitable for your current needs. This section explains how to add exclusions to permissions that were initially set as global.

• 1. Go to the Permissions section.

     

      

  2. Select the access level or the employee the permission will apply to.

     

      

  3. Click Edit.

      

      

  4. Uncheck Grant this permission globally.

      

  5. Under Select Employees, add the employees you want to exclude from the global permission, then select Exclude.

      

  6. The Global option will be automatically re-selected by default.
  7. Click Save.