Configure an employee relations case restriction
Define what groups can view or access employee relations cases using Case Restriction Configuration.
Before you begin
Role required: admin and sn_hr_er.admin
Warning: When creating case restrictions, be sure that you have at least one configuration that enables you to read these cases.
Case restriction configuration
Procedure
Navigate to All > Employee Relations > Administration > Case Restriction Configuration.
Click New.
On the form, fill in the fields.
| Field | Description |
|---|---|
| COE | Center of Excellence (COE) that you want to restrict access to.Note: For more information on COE, see HR Centers of Excellence data model. |
| Able to restrict cases | Option to enable members of a group to restrict access to all HR cases for the COE. |
| Able to view restricted cases | Option that enables a group to view restricted HR cases for the COE. |
| Application | The application that the case restriction configuration applies to. This field is automatically set to Human Resources: Employee Relations. |
| Active | Option to activate the case restriction configuration record. |
Click Save or Submit.
Add the groups that you want the case restriction configuration to apply to.
Note: You can also restrict by role. Agents with the sn_hr_er.confidential role can access restricted ER cases.
HR ER Case Restriction Configuration
Click Update.
Note: Collaborators on an HR or ER case can override COE security. But, ER cases with restrictions override collaborators. For more information, see Create COE security.
COE security policies are a way to easily restrict access to different COEs via configuration. The underlying COE security policy implementations are ServiceNow ACLs.
What to do next
Case restriction configuration enables the HR confidential group members to restrict a case using the Restrict button available on the case. When a case is marked as Restricted only the members in the HR confidential group can view the ER case.