Discussions
Securing a Role from being assigned to others.
Hi All,
Our current account has approx 12 roles, 10 for Managers (1 for each country in the organisation, who update and set employees up), 1 for Admin and 1 for "Employee". We heavily rely on the Manager role to isolate the employee data from each country manager.
We have one main problem - that a manager can go into the system and amend any user they can view (which includes themself) so that they can give themselves other roles. They then go into the system and amend their role restirction (eg. Department, Class or location) and then they see the other areas employees.
I want to be able to allow only certain roles to be available to non-admin accountsand I'd really appreciate any advice on this issue.