We'd like our IT department to be able to maintain employees' business email addresses and mobile numbers, without having access to sensitive personnel information (e.g. home address) or functions (e.g. terminate employment).
I can see that there's a regular task that goes directly to the Workplace Contact Data section of the employee record (29$/SAP_BYD_APPLICATION_UI/hcm/pa/changeworkplaceaddressqaf.QA.uicomponent), but I can't see a way to restrict other personnel tasks (hire, transfer, terminate).
What's the best practice for doing this? Is there an enhancement migration, a write-back Excel template, or some other recommended route?