Template CHRS Campus Security Deep Dive HW

HW ID#

Date Assigned

CHRS Conversion Guide Item

Task Name

Due Date

Complete

Comments

Modified By

Modified

Collaboration powered by Smartsheet | Report Abuse

2.4 User Profile - Process Profile Attribute

Identify which users in HR 9.2 will require a different Process Profile permission list other than the default value (xx_DEFAULT_PRC). There are two shared CSU process profile permission lists available to choose from: 1)CSU_PRCS_PROFILE_OWNER_RECUR 2) CSU_PRCS_PROFILE_OWNER

jcorpus@calstate.edu

01/13/26 10:44 AM

2.4 User Profile - Primary attribute

Identify which users in HR 9.2 will need a different Primary permission list other than the default value (xx_DEFAULT_PRI). Each campus will have one Primary permission list to choose from: (xx_PPHRLEAD).

jcorpus@calstate.edu

01/13/26 10:44 AM

2.5 Global User Profile

Review the 9.0 system and submit a Configuration Ticket to Allen with the names of the individuals for whom you want to set the value. For the first pass, submit a Configuration ServiceNow Ticket. If there are any changes, provide those updates to Allen.

jcorpus@calstate.edu

01/13/26 10:44 AM

3.1 Campus Distributed Security Role

Provide Allen with a list of names to be assigned the HR 9.2 distributed security role (CHR_PT_xx_Security_Admin).

jcorpus@calstate.edu

01/13/26 10:44 AM

Review Dynamic Roles

We will review CHRS Dynamic Roles in an upcoming security deep dive session. It's important for campuses to review these roles, provide feedback, and give their approval.
CHRS Knowledge Base: https://csuchrs.screenstepslive.com/a/1965549-security-dynamic-roles

jcorpus@calstate.edu

01/13/26 10:44 AM

3.4 Roles to Access PageUp

Please review the various PageUp roles (CSURSPU%) and determine which roles are needed for each individual. Campuses can check role assignments in HR 9.0 and submit a Configuration Ticket to Allen, providing a list in the Excel-to-CI format (CHRS User Profile, Role Name).

jcorpus@calstate.edu

01/13/26 10:44 AM

3.5 Roles to Access CHRS Reporting (QuickSight)

Please review the list of QuickSight roles and determine which roles will be required for each individual. Role name begins with CHR_RPTG%

jcorpus@calstate.edu

01/13/26 10:44 AM

3.6 Data Masking

Identify who in HR 9.2 is authorized to view the full values for SSN, DOB, Driver's License, and Passport Number. Assign the appropriate security roles to their user profiles:
1) CHR_PT_Full_View_All
2) CHR_PT_Full_View_DOB
3) CHR_PT_Full_View_Driver_Lic
4) CHR_PT_Full_View_Passport_Nbr
5) CHR_PT_Full_View_SSN

jcorpus@calstate.edu

01/13/26 10:44 AM

3.7 Query Roles

Please determine authorization for the following actions: 1) Creating private PeopleSoft queries: Identify individuals authorized to create private queries using the role CHR_PT_Query_Private. 2) Running pre-defined queries: Identify who should have access to run pre-defined queries using the role CHR_PT_Query_Viewer. 3) Scheduling query runs: Identify individuals authorized to schedule query runs using the role CHR_PT_Query_Schedule.

jcorpus@calstate.edu

01/13/26 10:44 AM

3.8 Query Access Tree Roles

Determine which role(s) should be assigned to a user profile to grant access to the query access tree. Role name begins with CHR_Query%

jcorpus@calstate.edu

01/13/26 10:44 AM

3.9 Integration Broker View Only Role

Identify who should be assigned the IB security role (CHR_PT_IB_Support).

jcorpus@calstate.edu

01/13/26 10:44 AM

3.10 Access to Enable Accessibility Mode

Identify who needs to be assigned the role CHR_PT_My_Preferences to enable screen reader mode.

jcorpus@calstate.edu

01/13/26 10:44 AM

3.11 Process Monitor

Role: CHR_PT_Process_Monitor

jcorpus@calstate.edu

01/13/26 10:44 AM

3.12 Report Manager

Role: CHR_PT_Report_Mgr

jcorpus@calstate.edu

01/13/26 10:44 AM

3.13 FTP Role

Role: CHR_PT_FTP_Utility

jcorpus@calstate.edu

01/13/26 10:44 AM

3.14 Comp Interfaces, Web Lib, Web Services

Role: CHR_PT_PeopleSoft_Advance

jcorpus@calstate.edu

01/13/26 10:44 AM

3.15 Recuriting Roles

Role: CHR_RS%

jcorpus@calstate.edu

01/13/26 10:44 AM

3.16 Setup Absence Report Access

Determine if your campus require any campus-specific AM roles to be created in HR9.2. Inform Allen.

jcorpus@calstate.edu

01/13/26 10:44 AM

3.17 Report Distribution Admin

Role: ReportDistAdmin

jcorpus@calstate.edu

01/13/26 10:44 AM

3.18 Campus Super User Role

Role: CHRxx_Super_User

jcorpus@calstate.edu

01/13/26 10:44 AM

3.19 Baseline delivered campus-specific Roles

Role: CHRxx% - replace XX with 2-letter abbrivation

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

Role: CHR_CSU_Administrator_Homepage

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

Role: CHR_PT_Campus_Config

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

Role: CHR_PT_Campus_ElevateAccNonprd

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

Role: CHR_PT_Central_Config_View

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

Role: CHR_PT_Find_Object_Navigation

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

Role: CHR_PT_HR_Notifications_Campus

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

Role: CHR_PT_Maintain_Security_View

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

Role: CHR_PT_NODEPROVISION

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

Role: CHR_PT_Tree_Manager

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

Role: CHR_PT_Tree_Viewer

jcorpus@calstate.edu

01/13/26 10:44 AM

Clean up opportunity

For HR 9.0, kindly prepend "DNU*" to the description field of any row-level permission lists that campuses wish to exclude and prevent from being included and loaded into HR 9.2.

jcorpus@calstate.edu

01/13/26 10:44 AM

Clean up opportunity

For HR 9.0, kindly prepend "DNU*" to the description field of any dynamic group that campuses wish to exclude and prevent from being included and loaded into HR 9.2.

jcorpus@calstate.edu

01/13/26 10:44 AM

Query Development

If your campus is looking to create private queries in HBCHRCMP, please follow the naming convention laid out in the query development guide when saving your query. Start the query name using your campus company code: EBY and SFO. Also, make sure to save it under the SSO/numbered user profile.

jcorpus@calstate.edu

01/13/26 10:44 AM

Dynamic Group

Review the Group IDs that have been loaded into HR 9.2 and ensure that the group ID select parameters align with your campus' business requirements.

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review the CHRS Dynamic Roles document, specifically section 2.0 on Recruiting. Each campus has the flexibility to create their own role queries to align with their unique business requirements when assigning a recruiting role.
CHRS Knowledge Base: https://csuchrs.screenstepslive.com/a/1965549-security-dynamic-roles

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Workforce Administration dynamic role - CHR_SS_Employee_All

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Workforce Administration dynamic role - CHR_SS_Inactive_Employee

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Absences Management dynamic role - CHR_AM_Employee_All

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Absences Management dynamic role - CHR_AM_Approver

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Absences Management dynamic role - CHR_AM_No_Leave_Taken

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Absences Management dynamic role - CHR_AM_NLT_Approver

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Time & Labor dynamic role - CHR_TL_Timesheet_Employe

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Time & Labor dynamic role - CHR_TL_Approver

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Benefits dynamic role - CHR_SS_BENEFITS_FLUID_ALL

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Labor Cost Distribution dynamic role - CHR_LCD_Employe

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. Temporary Academic Employment dynamic role - CHR_TF_Approval_Chart

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Dynamic Role

Please review and evaluate if the provisioning criteria aligns with your campus' business requirements. PeopleSoft Advance dynamic role - CHR_PT_PeopleSoft_Advance

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Security - where to source values

Towards the conclusion of the pre-implementation period, kindly examine the CHRS Security - where to source values document. If there are any modifications concerning the origin of security values for the upcoming iteration, please inform Allen.

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

There are several baseline delivered student hire security roles that are prefixed with CHR_WA_CSU_Stu%'. Please work your functional business analyst(s) to determine who should be assign these roles.

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

There are several baseline delivered temporary academic employment security roles that are prefixed with CHR_TF%'. Please work your functional business analyst(s) to determine who should be assign these roles.

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

There are several baseline delivered workforce administration security roles that are prefixed with CHR_WA_%'. Please work your functional business analyst(s) to determine who should be assign these roles.

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

There are several baseline delivered benefits security roles that are prefixed with CHR_BA_%'. Please work your functional business analyst(s) to determine who should be assign these roles.

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

There are several baseline delivered LCD security roles that are prefixed with CHR_LCD_%'. Please work your functional business analyst(s) to determine who should be assign these roles.

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

There are several baseline delivered absence management security roles that are prefixed with CHR_AM_%'. Please work your functional business analyst(s) to determine who should be assign these roles.

jcorpus@calstate.edu

01/13/26 10:44 AM

CHRS Roles

There are several baseline delivered time and labor security roles that are prefixed with CHR_TL_%'. Please work your functional business analyst(s) to determine who should be assign these roles.

jcorpus@calstate.edu

01/13/26 10:44 AM