Users and groups (User Privileges) 

If you have multiple users accessing My ePay Window its strongly recommended you create an account for each user.

My ePay Window allows complete control of users, groups and roles.

When would you use this? 
If you have multiple users accessing My ePay Window who you wish to only access specific companies or remove access to specific areas. For example: You wish to remove access to the Administration Menu.

This is not the same as setting an In house payroll. If you want to restrict access to your internal payroll from other administrators.

When would you not use it?
If you are the only person who accesses the administrator area of My ePay Window.
You only have a single company.
When you wish to give access to a single employer.

To understand Users and groups we need to explain the setup..

A group is a group of employers. A role is a list of access rights. We can create multiple roles for each group, then assign a user.

Example:

I have three Employer groups

  • All employers

  • Employer A,B,C & D

  • Employer E,F,G,H

I have two roles

  • All Menus

  • No Administration or Privileges Menu

We create three groups and two roles. Each of the two roles can be in any of the three groups as an option.

Any users within the role under the group will have employers assigned to the group as well as the restriction of the role.

All employers Employer A,B,C & D Employer E,F,G,H

All Menus

- User 1

- User 2

- User 3

All Menus

- User 7

- User 8

All Menus

- User 9

- User 10

No Administration or Privileges Menu

- User 4

- User 5

- User 6

 No Administration or Privileges Menu No Administration or Privileges Menu

We start by creating our groups, then assign a role and finally add users to the mix.

Best practices for User Privelages

Once you start using Privileges to restrict access to one or more client payrolls it is good practice to:

  1. Create an alternative ‘All Employers - Unrestricted’ Employer Group and add all employers to this by name (not as ‘All Data).

  2. Create an alternative ‘Payroll department Full Access’ Role without Payroll department Administration and Privileges access.

  3. Add the ‘Payroll department Full Access’ Role to the ‘All Employers - Unrestricted’ Client Group and add the majority of staff to this role.

  4. Leave your Payroll department Administrator in the default Full access role and default ‘All Employers Group’ and remove all other Staff Users – so your ‘Super’ or ‘Admin’ user retains Full access to everything.