Payroll Roles now recorded in the Roles Database

I. Payroll-related (PAYR) roles recorded in Roles Database

The Roles Database category for Payroll authorizations is abbreviated as PAYR. The Roles Database is used to record several PAYR roles, which control people's ability to perform various transactions in SAP or view data in SAP or the Warehouse.

PAYR authorizations in the Roles Database will be maintained by the Business Liaison Team and HR, and many are also maintainable by departmental HR Primary Authorizers.

II. Explanation of authorizations in the Roles Database

In the Roles Database, a person can have one or more Authorizations, where an Authorization describes a role or permission to perform some business function. Even if we are describing a role that does not strictly represent the authority to do something, such as a contact person, we still use the Roles Database technical term Authorization. Every Authorization has three parts: a person (who), a function (what) and a qualifier (where). A person is a Kerberos username. A function is what the person may do. A qualifier defines the area in which a person may perform that function, for instance, an organizational unit.

PAYR Authorizations have Qualifiers from several different hierarchies in the Roles Database:

Qualifier 
type
Type of objects in the hierarchy
PMIT  PCMIT-0 hierarchy of Profit Centers
PCCS Cost Object Supervisors and Cost Objects within the PCMIT-0 hierarchy of Profit Centers
COST Cost Objects within the Standard hierarchy of Profit Centers
ORG2 Hierarchy of 8-digit HR Org. Units
PYTG  Time Groups within the HR Org Unit hierarchy
PDED  Payroll deduction types
Thus, some PAYR Authorizations have Qualifiers that are financial objects, and others that are HR Org Units. Still other PAYR Authorizations are "all-or-nothing", and apply to all financial or organizational units at MIT; these have a NULL Qualifier. (The authorizations with a qualifier type of PDED, Payroll deduction type, are also authorizations for central administrators, and they apply to all organizational units at MIT.)

Like any other category of Authorizations in the Roles Database, PAYR Authorizations can be granted at various levels in the pertinent hierarchies (e.g., the Org Unit hierarchy, the PCMIT-0 Profit Center hierarchy, etc.). For example, if the Authorization uses an HR Org Unit as its qualifier, it can be granted at the DLC level (e.g., 10000429 Biology), a school or area level (e.g., 10000030 Science Area), or a higher level (e.g., 10000001 Provost Area, or 10000000 MIT-All). When an Authorization is granted at a higher level than a DLC, the Authorization applies to all DLCs within that area. Thus, an Authorization whose qualifier is 1000030 Science Area applies to 10000429 Biology, 10000491 Chemistry, 10000533 Mathematics, etc..

Authorizations defined in the Roles Database are distributed to the systems that use the Authorizations for controlling access, such as SAP and MIT's Data Warehouse.

III. View PAYR roles on the web

Many employees at MIT are already authorized to HR-related Authorizations via the Roles web interface. If you think you should be authorized to view this information but you are not, see the rules for who is allowed to view Authorizations described in the memo Roles Database Meta-authorizations.

Click one of the items below to view Payroll-related roles from the Roles Database.

IV. Definition of Functions used in HR roles

Function nameDefinition Qualifier type
Authorizations that can be restricted to a DLC or smaller unit
DACCA ADDRESSEE Addressee for centrally printed DACCAs (1 per PC) PMITPCs within the PCMIT-0 hierarchy)
DACCA ADDRESSEE-AMOUNT ONLY Addressee for printed DACCA-salaried copy PMITPCs within the PCMIT-0 hierarchy
DACCA ADDRESSEE-PERCENT ONLY Addressee for printed DACCA-percent only PMITPCs within the PCMIT-0 hierarchy
EDACCA ADMIN-PERCENT ONLY Can certify DACCA as proxy - percent only view PCCS CO Supervisors, COs, or PCs within the PCMIT-0 hierarchy
EDACCA ADMINISTRATOR Can certify DACCA as proxy - salary and percent PCCS CO Supervisors, COs, or PCs within the PCMIT-0 hierarchy
EDACCA CERTIFIER Can certify DACCA - salary and percent view PCCS CO Supervisors, COs, or PCs within the PCMIT-0 hierarchy
EDACCA CERTIFIER-PERCENT ONLY Can certify DACCA - percent only view PCCS CO Supervisors, COs, or PCs within the PCMIT-0 hierarchy
ESDS DISTR MAINT-NO SALARY Maintain salary distr in ESDS-no salary view ORG2 HR Org Units
ESDS DISTR MAINT-SEE SALARY Maintain salary distr in ESDS with salary view ORG2 HR Org Units
ESDS TRSFR-IN DISTR-NO SALARY Maint transfers-in distr in ESDS-no salary view PMIT PCs within the PCMIT-0 hierarchy
ESDS TRSFR-IN DISTR-SEE SALARY Maint transfers-in distr in ESDS with salary view PMIT PCs within the PCMIT-0 hierarchy
RPT HOURS PAID W/OUT $$ BY ORG View hours paid by pay-period, type of pay no $$$ ORG2 HR Org Units
RPT HOURS PAID WITH $$$ BY ORG View hours paid by pay-period, type of pay with $$ ORG2 HR Org Units
RPT ON EDACCA W/OUT $$$ BY CO Report on EDACCA without $$$ by Cost Object COST Cost Objects within the Standard PC hierarchy
RPT ON EDACCA W/OUT $$$ BY ORG Report on EDACCA without $$$ by HR Org Unit ORG2 HR Org Units
RPT ON EDACCA WITH $$$ BY CO Report on EDACCA with $$$ by Cost Object COST Cost Objects within the Standard PC hierarchy
RPT ON EDACCA WITH $$$ BY ORG Report on EDACCA with $$$ by HR Org Unit ORG2 HR Org Units
STUDENT PAF AUTHORIZER Create and approve student Pers Action Forms PYTG Time Groups within the Org Unit hierarchy
TIMESHEET ADMINISTRATOR Enter timesheets/distribution; approve timesheets PYTG Time Groups within the Org Unit hierarchy
TIMESHEET APPROVER Enter and approve timesheets in SAPWeb. PYTG Time Groups within the Org Unit hierarchy
TIMESHEET DISTRIBUTION ENTRY Enter distribution data on timesheets PYTG Time Groups within the Org Unit hierarchy
Central administrators authorizations
DISPLAY PAY STUBS For use by Payroll Office NULLnone
DISPLAY PAYROLL POSTING SUMARY For use by Payroll Office NULLnone
EDACCA CENTRAL USER-SEE SALARY For use by Payroll - central access to DACCAs NULLnone
ESDS CENTRAL USER-SEE SALARY For use by Payroll Office NULLnone
MAINT DEDUCTIONS Create and maintain deduction data in SAP NULLnone
MAINT GARNISHMENTS Create and maintain garnishment data in SAP NULLnone
MAINT TAX INFOTYPES Create and maintain tax infotype data in SAP NULLnone
MAINT TIME GROUPS Create and maintain time groups in SAP NULLnone
PROCESS OFF-CYCLE PAYROLLS Process off-cycle payrolls in SAP NULLnone
PROCESS PAYROLL Process weekly, monthly empl payrolls in SAP NULLnone
PROCESS PAYROLL FEEDS Process Payroll feeds in SAP NULLnonePROCESS PAYROLL POSTINGS Process payroll postings in SAP NULLnone
REPORT ON ALL PAYROLL DATA Report on all data - includes confidential data NULLnone
REPORT ON DEDUCTION DATA For use by central offices PDED Payroll Deduction Types
TIMESHEET ADMINISTR-CENTRAL For use by Payroll Office - central time admin NULLnone
TIMESHEET SUPER-CENTRAL For use by Payroll Office - central time super NULLnone

Last modified by repa on 6/13/2006