Users Direct Subordinate Constraint

Custom Reports Deprecation: Cornerstone will be deprecating the legacy reporting solution "Custom Reports" with the February ’21 Release. For more information, see the announcement in the May '20 release notes and in the May '20 Release Summary & Matrix.

The User's Direct Subordinate constraint is available on the Create and View permissions for custom report types that have fields that may contain sensitive information.

The constraint is available for the following custom report types:

  • Certification Report
  • Compensation Report
  • Competency Report
  • Connect Communities Report
  • Development Plan Report
  • Evaluations Report
  • Goals Report
  • Job Pool Succession Report
  • Multi-Module Report
  • Observation Checklist Report
  • Performance Report
  • Performance Review Report
  • Recruiting Report
  • Resume Report
  • Succession Report
  • Test Report
  • Training Form Management Report
  • Training Forms - Curricula Report
  • Training Plan Report
  • Transcript Report
  • User Report

Add Constraint to Create Permission

Adding the constraint to the Create permission will constrain who the user can share the report with on the Sharing tab and for whom the user can filter the data on the User/OU Filters tab.

Add Constraint to View Permission

Adding the constraint to the View permission will constrain the data when a user exports the report and when a user views the chart as a published widget in dashboards. If the user also has the Create permission constrained, then the report preview pane in the Custom Report Builder will be constrained.

Sharing Tab

With this enhancement, if the User’s Direct Subordinate constraint is applied to the report permission, then the Sharing tab will display a message that indicates that the availability criteria that is selected will only include employees who are a direct subordinate of the user creating the report.

User/OU Filters Tab

With this enhancement, if the User’s Direct Subordinate constraint is applied to the report permission, then the User/OU Filters tab will display a message that indicates that the availability criteria that is selected will only include employees who are a direct subordinate of the user creating the report.

Impact to Security Roles

If a security role, such as the Manager default role, has a general constraint, then that constraint will override the User's Direct Subordinate constraint.

For example, a portal has configured the Manager security role with permissions for custom reports. They have applied the general constraint of Indirect Subordinates to the permissions. If they would like to have the User's Direct Subordinate constraint applied, then they would need to do the following:

  1. Remove the custom reports permissions from the Manager role.
  2. Grant access to the reports in a different role.
  3. Add the User's Direct Subordinate constraint to the permissions in the different role.

Use Case

  1. Harry the Human Resources Director, needs to manage the completed goals of his direct reports. He prefers using the publish custom charts to dashboards feature, as it enables him to keep track of things at a glance.
  2. Cassie, the Chief Executive Officer, also prefers using the publish custom charts to dashboards feature and feels that dashboards ensure a consistent experience for all directors.
  3. Cassie asks Anna the Analyst to build a dashboard and send it to all users in the Position organizational unit (OU) of Director.
    1. The User’s Direct Subordinate constraint is not currently applied to custom reporting permissions.
    2. The closest existing constraint is User’s Self and Subordinates.
    3. With this constraint, Harry can see all of the goals of his subordinates in the dashboards, rather than only the goals of his direct reports.
  4. Anna applies the User’s Direct Subordinate constraint to the Custom Goal Report - View permission for the directors.
  5. Anna informs all of the directors that they will now see only data for their direct reports when they refresh their dashboards.
  6. Harry will see only his six direct reports in the Goals widget that Anna created and shared with him.

Security

The following Reports - Analytics permissions can apply the User's Direct Subordinate constraint:

PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Custom Certification Report - Create Grants ability to create and edit Custom Certification reports. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, and User's Direct Subordinates. Reports - Analytics
Custom Certification Report - View Grants ability to view results of Custom Certification reports created by self or shared by others. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, and User's Direct Subordinates. Reports - Analytics
Custom Compensation Report - Create Grants ability to create and edit custom Compensation reports. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, User's Subordinates, and User's Direct Subordinates. Reports - Analytics
Custom Compensation Report - View Grants ability to view results of custom Compensation reports created by self or shared by others. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, User's Direct Subordinates, and User's Subordinates. Reports - Analytics
Custom Competency Report - Create Grants ability to create and edit custom Competency reports. This permission can be constrained by User Self and Subordinates, OU, User’s OU, User's Direct Subordinates, and User. Reports - Analytics
Custom Competency Report - View Grants ability to view results of custom Competency reports created by self or shared by others. This permission can be constrained by User Self and Subordinates, OU, User’s OU, User's Direct Subordinates, and User. Reports - Analytics
Custom Connect Communities Report - Create Grants access to view, create, and edit the Connect Communities Report in Custom Reports, which gives a way to measure success of communities in connect. This permission can be constrained by User's Direct Subordinates. Reports - Analytics
Custom Connect Communities Report - View Grants access to view the Connect Communities Report in Analytics, which gives a way to measure success of communities in connect. This permission can be constrained by User's Direct Subordinates. Reports - Analytics
Custom Development Plan Report - Create Grants ability to create and edit custom Development Plan reports. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, and User's Direct Subordinates. Reports - Analytics
Custom Development Plan Report - View Grants ability to view results of custom Development Plan reports created by self or shared by others. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, and User's Direct Subordinates. Reports - Analytics
Custom Evaluations Reports - Create Grants ability to create and edit custom Evaluation reports (training evaluation levels 1, 2, and 3). This permission can be constrained by OU, User's OU, and User's Direct Subordinates. Reports - Analytics
Custom Evaluations Reports - View Grants ability to view results of custom Evaluation reports (training evaluation levels 1, 2, and 3) created by self or shared by others. This permission can be constrained by OU, User's OU, and User's Direct Subordinates. Reports - Analytics
Custom Goal Report - Create Grants ability to create and edit custom Goals reports. This permission can be constrained by OU, User's OU, User's Direct Subordinates, and User Self and Subordinates. Reports - Analytics
Custom Goal Report - View Grants ability to view results of custom Goal reports created by self or shared by others. This permission can be constrained by OU, User's OU, User's Direct Subordinates, and User Self and Subordinates. Reports - Analytics
Custom Job Pool Succession Report - Create Grants ability to create and edit custom Job Pool Succession reports. This permission can be constrained by Position and User's Direct Subordinates. Reports - Analytics
Custom Job Pool Succession Report - View Grants ability to view results of custom Job Pool Succession reports created by self or shared by others. This permission can be constrained by Position and User's Direct Subordinates. Reports - Analytics
Custom Multi-Module Report - Create Grants ability to create and edit custom Multi-Module reports. This permission works in conjunction with other Custom Report - Create permissions. This permission can be constrained by OU, User's OU, User Self and Subordinates, User's Direct Subordinates, and User. Reports - Analytics
Custom Multi-Module Report - View Grants ability to view results of custom Multi-Module reports created by self. This permission works in conjunction with other Custom Report - View permissions. This permission can be constrained by OU, User's OU, User Self and Subordinates, User's Direct Subordinates, and User. Reports - Analytics
Custom Observation Checklist Report - Create Grants ability to create and edit Observation Checklist Reports in Analytics. This permission can be constrained by OU, User's OU, User, User's Self, User's Manager, User's Subordinates, User's Direct Reports, User's Superiors, User's Direct Subordinates, and User Self and Subordinates. Reports - Analytics
Custom Observation Checklist Report - View Grants ability to view Observation Checklist Reports in Analytics. This permission can be constrained by OU, User's OU, User, User's Self, User's Manager, User's Subordinates, User's Direct Reports, User's Superiors, User's Direct Subordinates, and User Self and Subordinates. Reports - Analytics
Custom Performance Reports - Create Grants ability to create and edit Custom Performance reports. This permission can be constrained by OU, User's OU, User's Self and Subordinates, User's Direct Subordinates, and User's Subordinates. Reports - Analytics
Custom Performance Reports - View Grants ability to view results of Custom Performance reports created by self or shared by others. This permission can be constrained by OU, User's OU, User's Self and Subordinates, User's Direct Subordinates, and User's Subordinates. Reports - Analytics
Custom Performance Review Report - Create Grants ability to create and edit custom Performance Review reports. This permission can be constrained by OU, User's OU, User's Self and Subordinates, User's Direct Subordinates, and User's Subordinates. Reports - Analytics
Custom Performance Review Report - View Grants ability to view results of custom Performance Review reports created by self or shared by others. This permission can be constrained by OU, User's OU, User's Self and Subordinates, User's Direct Subordinates, and User's Subordinates. Reports - Analytics
Custom Recruiting Report - Create Grants ability to create and edit Custom Recruiting reports. This permission can be constrained by Division, Position, Location, and User's Direct Subordinates. Reports - Analytics
Custom Recruiting Report - View Grants ability to view results of Custom Recruiting reports created by self or shared by others. This permission can be constrained by Division, Position, Location, and User's Direct Subordinates. Reports - Analytics
Custom Resume Report - Create Grants ability to create and edit custom Resume reports. This permission can be constrained by OU, User's OU, User, User's Direct Subordinates, and User Self and Subordinates. Reports - Analytics
Custom Resume Report - View Grants ability to view results of custom Resume reports created by self or shared by others. This permission can be constrained by OU, User's OU, User, User's Direct Subordinates, and User Self and Subordinates. Reports - Analytics
Custom Succession Report - Create Grants ability to create and edit Custom Succession Management (SMP) Reports. This permission can be constrained by OU, User's OU, User Self and Subordinates, User's Direct Subordinates, and User's Subordinates. Reports - Analytics
Custom Succession Report - View Grants ability to view results of Custom Succession Management (SMP) Reports created by self or shared by others. This permission can be constrained by OU, User's OU, User Self and Subordinates, User's Direct Subordinates, and User's Subordinates. Reports - Analytics
Custom Test Reports - Create Grants ability to create and edit custom Test reports (Test Engine data). This permission can be constrained by OU, User's OU, User Self and Subordinates, and User's Direct Subordinates. Reports - Analytics
Custom Test Reports - View Grants ability to view results of custom Test reports (Test Engine data) created by self or shared by others. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User's Direct Subordinates. Reports - Analytics
Custom Training Form Management Reports - Create Grants ability to create and edit custom Training Form Management reports. This permission can be constrained by OU, User's OU, and User's Direct Subordinates. Reports - Analytics
Custom Training Form Management Reports - View Grants ability to view custom Training Form Management reports. This permission can be constrained by OU, User's OU, and User's Direct Subordinates. Reports - Analytics
Custom Training Forms - Curricula Report - Create Grants ability to create and edit custom Training Forms - Curricula reports. Reports - Analytics
Custom Training Forms - Curricula Report - View Grants ability to view custom Training Forms - Curricula reports. Reports - Analytics
Custom Training Plan Report - Create Grants ability to create and edit training plan (Training Demand Forecast) custom reports. This permission can be constrained by OU, User's OU, User, User's Direct Subordinates, and User Self and Subordinates. Reports - Analytics
Custom Training Plan Report - View Grants ability to view results of training plan (Training Demand Forecast) custom reports created by self or shared by others. This permission can be constrained by OU, User's OU, User, User's Direct Subordinates, and User Self and Subordinates. Reports - Analytics
Custom Transcript Reports - Create Grants ability to create and edit Custom Transcript (Training Record) reports. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User's Direct Subordinates. Reports - Analytics
Custom Transcript Reports - View Grants ability to view results of Custom Transcript (Training Record) reports created by self or shared by others. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User's Direct Subordinates. Reports - Analytics
Custom User Reports - Create Grants ability to create and edit Custom User reports. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User's Direct Subordinates. Reports - Analytics
Custom User Reports - View Grants ability to view results of Custom User reports created by self or shared by others. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User's Direct Subordinates. Reports - Analytics