We have an auditing requirement with which we are attempting to comply. I need to set some method of security to prohibit individuals with permissions to process payroll from being able to set up a new employee. I originally thought I could set field level security on the FNAME, LNAME & SS# fields on the Employee Maintenance Window to not allow them to add/modify those fields. As they are required fields that does not work. The roles I am attempting to restrict will need to access the Employee Maintenance window for viewing purposes and to deactivate a terminating employee (by using Inactive Flag, Separation Date, Reason Code) after their last paycheck as part of our workflow so I can't simply set restrictions on the whole window. Can anyone advise me of a clever way to achieve this?
Thank You,
Lisa Patry