Why are we limiting who can see records in CHEF?
CAMP allowed people access to information they didn’t need to do their jobs. I mean, it was cool in 1996 b/c no one cared & data security and privacy weren’t things people talked about. But isn’t cool now. To deal with privacy and data security, it is necessary for us to lock down access to the records per the organizational structure.
Some groundwork:
All employees and contractors (non-students) will have a record in Unit4/HR Core (position management)
Full time, regular employees will have no ‘end date’ in Unit4 and their computer account will have no end date (ie. an employee is an employee forever… unless they leave, in which case, they’ll be assigned an end date on which their Unit4 record will ‘close’ and their computer account will be thrown into the deletion process.)
Term employees hired on a term WILL have an end date but their computer account will not. They may get extended. Whatever. Eventually, their term will come to an end. HR offboarding processes will kick in. Their Unit 4 record will become inactive and their computer account will be thrown into the deletion process.
Contractors of all kinds will have a ‘contract end date’. When their contract ends, their Unit4 record will become inactive. Their computer account will be thrown into the deletion process.
CHEF integrates with Unit 4/HR Core (position management).
Employees | Contractors |
|---|---|
| |
Then | |
| |
One of those instructions is to enter a record into CHEF so that a computer account can be created (and other things will happen, like a record is added to Unit4 & Avanti)
Another instruction is to ask for all the things your new person needs – these include a computer, elevated access to the appropriate systems like the student system, CMMS, EMS, JIRA, etc. etc., depending on their job. Requests for these things happen OUTSIDE of CHEF. Other things that might be needed are orientation to Moodle and teaching online if the new person is a faculty or associate faculty. The hiring manager will be pointed to the right place to ask for these kinds of things.
Can we still use shared mailboxes as CAMP supervisors?
Some people currently use shared mailboxes as CAMP supervisors so that notifications can be received and processed by more than one person.
Although the hiring manager or delegate must enter or edit records in CHEF, they can provide a shared mailbox email address as the recipient of notifications if that works better for your team.
I often create/update resource records in CAMP for my managers when they are away or need support. Can I still do that in CHEF?
The answer is YES, you absolutely can edit records for everyone who reports through to you. And you can add new records, too.
This is because as this manager (circled in yellow), you have access to all records in your organization (shaded in blue), including those that belong to people that report to a manager… who reports to you.
