Think "admin"
Assigned to the user and stays with that user regardless of
position change
User-Based Security
Unconstrained design - least restrictive
Individuals who need system-wide access for their areas
of responsibility
What kind of security group is an HR admin or Recruiting
User-based Security Group
admin?
Assign Users to User-Based Security Group
Which tasks can you use to assign user-based security? OR
Assign User-Based Security Group for Person
Think "partner" or "supervisory"
Role-based security uses assignable roles
Role assignments involve assigning a role to a given work-
er position or job for a given org (assigning a role to a
"chair")
Role-Based Security Allows workers to access needed tasks, reports, and busi-
ness process steps, but constrains them to orgs that they
support or lead
Only role-based constrained security groups allow you to
individually assign worker positions to a role for a specific
organization they are not in
What kind of security group is a Payroll Partner or HR
Role-Based Security Group
Partner (Supervisory)?
Maintain Assignable Roles
Which tasks can you use to assign role-based security? OR
Assign Roles
Look up the role or group
How do you add a domain to a role or a group? Related Actions > Security Group > Maintain domain per-
missions for security group