[VA] Setting Up Data Security to Secure Employee Information

Enabling Data Security for Employee (bEmployee) Data

Employee payroll data can be restricted by payroll group using VA Data Security Setup and PR Groups. Enabling data security affects all companies in Vista.

Steps:

1. Create a Security Group

   • In VA Security Groups, create a new group with Group Type = 0-Data.

   • Do not add users yet. (Optional: include “No Users” in the group name as a warning.)

2. Set Up Data Security

   • In VA Data Security Setup, select bEmployee in the Datatype field.

   • Check Secure Datatype.

   • Enter the security group from Step 1 in Default Security Group.

3. Secure Specific Tables

   • In the Secure Tables tab, select tables to secure.

   • Check Apply Security for each table.
     

   • Note: The Secured box stays unchecked, and Not Synchronized becomes checked. Changes take effect after regenerating views.

Tip: Only secure tables that need restricted access to maintain system performance.

1. Set PR Group Access

   • In PR Groups → Group Security, assign users who should access employee data for each PR group and company.

2. Regenerate Views

   • In VA Data Security Setup, click Regenerate Views (or open VA View Generator from Programs).

   • Click Add Unsynchronized Views to populate tables selected in Step 3.

   • Click Regenerate Views to apply security.

Reminder: PR Group security must be set for each group and each PR company.