Query on Authorization for running Payroll

[Former Member]

In our project, every employee is associated with a grade (like A, B, C etc.) and levels within the grade (like A1, B1, C1 etc.). The requirement is that the data from payroll process, generation of payslip etc. should be kept kept highly confidential for employees above a certain grade (e.g. for all employees above the grade E), as they belong to the top management. Hence, they want only a specified person to be able to execute these activities, as well as the entry of payroll master data. Also, they want the payslips to be sent to these employees through emails, as a password-protected PDF file.

My query is should this be handled through Authorizations or is it done by creating a separate payroll area for these employees and then assigning a specific Payroll Administrator for it?

If it is to be done thru separate payroll area, then should I create separate Employee subgroup grouping and attach it to the payroll area? These employees are spread across different personnel areas. I have the following ESGs: Workmen, Admin Staff, Technical Staff, Executive Staff and Top Management staff. This requirement is to be catered to all Top Management Staff and part of the Executive Staff. So, should I split the ESG for Executive Staff into two ESGs? (one group for normal eexcutive staff and another group for the above requirement)

Please guide me

-Shambvi

[Former Member]

Ok, I will try. Thanks for the suggestions.

[Former Member]

Shambvi,

The easiest way is to create different employee groups or subgroups and give authorization according to these subgroups. You can also create more than one payroll area instead of using multiple employee subgroups.

But if it will be hard to maintain etc I can advise you to create custom authorization object and run payroll according to that authorization object but it may cause lots of testing.

And also you have to consider FI-CO Integration side. You can do posting via payroll areas or personnel numbers. Normally posting is done via payroll area. So if payrolls will be posted by different users in different times then it may be logical to create more than one payroll areas and control the process via payroll areas.

Regards;

Okan

[Former Member]

Hi,

The person responsible for payroll data and running of payroll ONLY has to be given authorization to do this work for security concern as you mentioned.

Also regarding sending Payslips thru email with password protected PDF is a workaround you will have to do with your technical team.TEST it thoroughly and then go ahead.there are many threads that shall guide you on this issue,refer them.

Salil

[Former Member]

Thanks for the reply. But the customer wants two different payroll administrators to handle the payroll-related activities (so, two payroll areas will be required). One administrator will handle for the normal employees (i.e. where the payslip data is not very confidential & where payslips need not be sent thru emails) and the other admin. will handle it for the employees where confidentiality is of high priority. The ESG for Executive Staff consists of some employees who fit into first category and some employees who are into second category. So, should I group them into separate ESGs and attach each ESG to different payroll areas?

-Shambvi

Edited by: shambhvi murthy on Oct 21, 2011 10:19 AM

[Former Member]

Hi Shambvi;

I think it is more secure to make two employee subgroupings for executives.

So it will be much easier to control the access to basic pay etc.

Regards;

Okan

[Former Member]

Hi,

Agree with what Okan said maintain 2 ESG and check

Salil