STEP 01
Identify the responsibility
Separate platform administration, company administration and employee self-service. A user’s job title or department should not be treated as an automatic access grant.
STEP 02
Review actual permissions
Company-enabled modules and employee-specific HR permissions determine which workflows are available. Give access only for the responsibilities the user needs and verify the result in the user’s workspace.
STEP 03
Maintain access changes
Review user and company access when employment or responsibilities change. Sensitive APIs also enforce authorization; a hidden sidebar alone is not an access control. Ask Mentrox about deployment-specific session and infrastructure settings.
Before you finish
- The account is attached to the correct company.
- Module and employee permissions match actual responsibilities.
- Access is re-reviewed when roles change.
