Configure Access to Integrations

How to assign access rights — Generic Data Access Profiles (GDAP) and Function Access Profiles (FAP) — for file-based integrations and Transaction Assistant.

Access rights determine the functional components and data that people can view.

  • Generic Data Access Profiles (GDAP) — Control access to configured component data.
  • Function Access Profiles (FAP) — Control access to functions and actions.

Example: Assign access to Integration Processes in the FAP for an HR administrator, and configure the GDAP to select the component data that this administrator can access.

Who gets access to what?

Develop a strategy for who gets access to which functions and components as follows:

  • Identify all roles and people who need to run integrations, which integrations they need to run, which documents they need, and who needs to review results or correct failed transactions.

    For more details, see the Control Access to Integration Run Details topic.

  • Complete the Access Plan.

Configure the GDAP for file-based integrations

Configure the Generic Data Access Profile (GDAP) to select the integrations that a person can run.

  1. Log in as an administrator.
  2. Click Tap Main Menu Administration > Application Setup > Access Profiles > Generic Data Access Profiles.
  3. Create, edit, or remove a profile:
    • Click Tap New. Enter a Name.
    • Select a profile. Click Tap Edit or Duplicate.
    • Select a profile. Click Tap Delete. Click Tap OK.
  4. From Setup Category, select Integrations.
  5. From Setup Item, select:
    • Integrations
    • Integration Sets
  6. Add integrations to the profile. These integrations must be installed in order to be available.
    • From Available, select the items and click tap the right arrow . Alternatively, click tap the double right arrow to select all items.
    • (Optional) Remove items. From Selected, select the items and click tap the left arrow . Alternatively, click tap the double left arrow to remove all items.
  7. Click Tap Save & Return.
  8. Repeat for the next person.

Configure the FAP for integrations and Transaction Assistant

Configure the access control points (ACP) of a Function Access Profile (FAP) to give access to Integration Hub and Transaction Assistant.

  1. Click Tap Main Menu Administration > Application Setup > Access Profiles > Function Access Profiles.
  2. Create, edit, or remove a profile:
    • Click Tap New. Enter a Name.
    • Select a profile. Click Tap Edit or Duplicate.
    • Select a profile. You cannot delete system profiles. Click Tap Delete. Click Tap OK.
  3. (Optional) Enter a Description.
  4. To make this profile the default profile, select Default.
  5. From Function, select the role and functions. Click the plus (+) signs for child roles or functions. All functions are disallowed by default.
  6. Managers — common setup

    Select Manager— Common Setup.

    • Transaction Assistant: Select Allowed in:

      Edit: Edit or correct failed integration runs.

      Delete: Delete failed integration runs.

      View: View and resubmit failed integration runs.

    • Integrations: In Access Scope, select Allowed to monitor, run, schedule, and install integrations; this setting allows access to all of the sub-access points for integrations.
      Note: Tip: To select all access to integrations at once, in Integrations > Access Scope select Allowed.
      • Install Integrations

        In Access Scope, select Allowed to install (deploy) and configure integrations.

        To limit access, in Install and Configure integrations, select Disallowed in any of the following:

        Add: Create new integration installations.

        Edit: Edit integration installations.

        Delete: Delete integration installations.

      • Run Integrations: In Add, select Allowed to run integrations and edit available parameters.
      • Schedule Integrations Configuration

        In Access Scope, select Allowed to schedule integrations or integration sets to run later or at a recurring frequency.

        In Schedule Integrations, you can limit access to manage scheduled integrations. Select Disallowed for any of the following:

        Add: Schedule integration runs or copy scheduled integration runs to create new scheduled runs.

        Edit: Edit, enable, or disable scheduled integration runs.

        Delete: Delete scheduled integration runs.

      • View my integration runs only: In Access Scope, select Allowed to restrict people to view only the integrations and data that they run and not those run by others. For more details, see the Control Access to Integration Run Details topic.

      • View Integration Results: In View, select Allowed to view detailed results of integration runs.
      • Reference Tables: Select Allowed in:

        Edit: Upload and edit cross-reference tables.

        View: Download and view cross-reference tables.

      • View the files of an integration displayed in the integration run details: Select Allowed in Access Scope to display the files for integrations.
      • Manage Integration Properties: Select Allowed in Access Scope to download and upload integration properties.
      • Manage SFTP: Select Allowed in Access Scope to manage SFTP accounts.
      • Payroll Setup

        Payroll Code Mapping: Select Allowed in Access Scope to configure the mapping of payroll codes to paycodes for Payroll Export integrations.

        HCM Payroll Configuration: Select Allowed in Access Scope to configure payroll data for the HCM Payroll Export integration.

        Accrual Code Mapping: Select Allowed in Access Scope to configure the mapping of accrual codes to earnings and takings paycodes for Payroll Export integrations.

        Accrual Transaction Mapping: Select Allowed in Access Scope to configure the mapping of accrual transactions to paycodes for Payroll Export integrations.

        General Ledger Mapping: Select Allowed in Access Scope to configure the mapping of general ledgers to paycodes for Payroll Export integrations.

    • Design Integrations: In Access Scope, select Allowed to configure and build integrations. This gives access to the Integration Template Designer (the Boomi™ application).
      Caution: Allow only qualified personnel who have training in the Boomi™ application to configure or create integrations.

  7. Managers — system configuration

    • Select Manager—System Configuration.
    • Select Setup > Integrations Setup and do the following:
      • In Connections > Access Scope, select Allowed to configure extension tables.For details, see Extension Tables.

      • In Extension Database, select any of the following:

        In Add, select Allowed to enter database commands.

        In View, select Allowed to see the detailed view of database commands.

    • In HCM Profile Setup > Access Scope, select Allowed to centrally manage time and attendance values and eliminate the need for cross-reference tables.For details, see HCM Profile Setup.

  8. APIs

    • Select APIs.
    • In API Beans > Transaction Assistant Beans, select Allowed in any of the following:

      Add: Load failed XML transactions through the API Bean into the Transaction Assistant.

      Edit: Edit or delete failed XML transactions through the API Bean and Transaction Assistant.

      View: Display failed XML transactions through the API Bean in the Transaction Assistant.

    • In Rest APIs > Punch on Behalf of Employee, select Allowed in Access Scope to allow an authorized user account to make punches on behalf of an employee.
    • In Allow unrestricted read access to locations map, select Allowed in View to allow integrations to access all locations in the business structure. This setting allows a user account to submit API calls, bypass organization-set filters and access the entire organization, but have no other authority over that organization. Typically, you apply this setting only for payroll configuration for the payroll export integrations. Do not enable this access for manager or administrator accounts.
  9. Click Tap Save & Return.

Associate access profiles to people

Make sure that the access profiles are associated with the relevant managers or administrators. If you don't have access to People Information, contact the administrator who does have access.

  1. Select Main Menu Maintenance > People Information. Select a person.
  2. In Employee, select Access Profiles.
  3. Select the:

    Function Access Profile

    Display Profile

    Locale Profile

    Notification Profile

  4. Click Tap Save .
  5. Repeat for other people.