Configure Access to API-Based Integrations

1. Develop a strategy for who gets access to which functions and components.
2. Identify all roles and people who need to run integrations, which integrations they need to run, which documents they need, and who needs to review results or correct failed transactions.

Example Access Plan

Configure the access control points (ACP) of a Function Access Profile (FAP) to give access to integrations.

1. Log in as an administrator.
2. Kliknij Dotknij Main Menu  > Administration > Application Setup > Access Profiles > Function Access Profiles. 
3. Create, edit, or remove a profile:
   • Kliknij Dotknij New. Enter a Name.
   • Select a profile. Kliknij Dotknij Edit or Duplicate.
   • Select a profile. You cannot delete system profiles. Kliknij Dotknij Delete. Kliknij Dotknij OK.
4. (Optional) Enter a Description.
5. To make this profile the default profile, select Default.
6. From Function, select the role and functions. Click the plus (+) signs for child roles or functions. All functions are disallowed by default.
7. Managers — common setup

   Select Manager—Common Setup.

   • Integrations: In Access Scope, select Allowed to monitor, run, schedule, and install integrations; this setting allows access to all of the sub-access points for integrations.

     Uwaga: Tip: To select all access to integrations at once, in Integrations > Access Scope select Allowed.

     • Install Integrations

       In Access Scope, select Allowed to install (deploy) and configure integrations.

       To limit access, in Install and Configure integrations, select Disallowed in any of the following:

       Add: Create new integration installations.

       Edit: Edit integration installations.

       Delete: Delete integration installations.

     • Run Integrations: In Add, select Allowed to run integrations and edit available parameters.
     • Schedule Integrations Configuration

       In Access Scope, select Allowed to schedule integrations or integration sets to run later or at a recurring frequency.

       In Schedule Integrations, you can limit access to manage scheduled integrations. Select Disallowed for any of the following:

       Add: Schedule integration runs or copy scheduled integration runs to create new scheduled runs.

       Edit: Edit, enable, or disable scheduled integration runs.

       Delete: Delete scheduled integration runs.

     • View Integration Results: In View, select Allowed to view detailed results of integration runs.
     • Reference Tables: Select Allowed in:

       Edit: Upload and edit cross-reference tables.

       View: Download and view cross-reference tables.

     • View the files of an integration displayed in the integration run details: Select Allowed in Access Scope to display the files for integrations.
     • Manage Integration Properties: Select Allowed in Access Scope to download and upload integration properties.
     • Manage SFTP: Select Allowed in Access Scope to manage SFTP accounts.
     • Payroll Setup

       Payroll Code Mapping: Select Allowed in Access Scope to configure the mapping of payroll codes to paycodes for Payroll Export integrations.

       HCM Payroll Configuration: Select Allowed in Access Scope to configure payroll data for the HCM Payroll Export integration.

       Accrual Code Mapping: Select Allowed in Access Scope to configure the mapping of accrual codes to earnings and takings paycodes for Payroll Export integrations.

       Accrual Transaction Mapping: Select Allowed in Access Scope to configure the mapping of accrual transactions to paycodes for Payroll Export integrations.

       General Ledger Mapping: Select Allowed in Access Scope to configure the mapping of general ledgers to paycodes for Payroll Export integrations.

   • Design Integrations: In Access Scope, select Allowed to configure and build integrations. This gives access to the Integration Template Designer (the Boomi™ application).

     Przestroga :Allow only qualified personnel who have training in the Boomi™ application to configure or create integrations.

8. Managers — system configuration

   • Select Manager—System Configuration.
   • Select Setup > Integrations Setup and do the following:
     • In Connections > Access Scope, select Allowed to configure extension tables. For details, see Tabele rozszerzeń.

     • In Extension Database, select any of the following:

       In Add, select Allowed to enter database commands.

       In View, select Allowed to see the detailed view of database commands.

   • In HCM Profile Setup > Access Scope, select Allowed to centrally manage time and attendance values and eliminate the need for cross-reference tables. For details, see HCM Profile Setup.

9. APIs

   • Select APIs.
   • In API Beans >Transaction Assistant Beans, select Allowed in any of the following:

     Add: Load failed XML transactions through the API Bean into the Transaction Assistant.

     Edit: Edit or delete failed XML transactions through the API Bean and Transaction Assistant.

     View: Display failed XML transactions through the API Bean in the Transaction Assistant.

   • In Rest APIs > Punch on Behalf of Employee, select Allowed in Access Scope to allow an authorized user account to make punches on behalf of an employee.
   • In Allow unrestricted read access to locations map, select Allowed in View to allow integrations to access all locations in the business structure. This setting allows a user account to submit API calls, bypass organization-set filters and access the entire organization, but have no other authority over that organization. Typically, you apply this setting only for payroll configuration for the payroll export integrations. Do not enable this access for manager or administrator accounts.
10. Kliknij Dotknij Save & Return.

Make sure that the access profiles are associated with the relevant managers or administrators. If you don't have access to People Information, contact the administrator who does have access.

1. Kliknij Dotknij Main Menu . Select Maintenance > People Information. Select a person.
2. In Employee, select Access Profiles.
3. Select the:

   Function Access Profile = the FAP

   Locale Profile

   Notification Profile

4. Kliknij Dotknij Save .
5. Repeat for other people.