kippy

user roles
Overview
​
kippy ensures that only the right user can view and change information appropriate for their role.
Each users has a role and a team. The role determines what they can do. For example, only a Manager can appraise. The team determines who they can appraise i.e. only the users of their team.
Roles
A user can only have one of the 3 roles - Team Manager, Team Admin and User role. The user may also be given the System Owner as well as.
Teams
The user's permissions cascade down the organisational hierarchy. So for example, a Manager in the Level 2 Technology team can appraise staff in the Level 3 Software Engineering and Level 3 Testing teams underneath. However, that Manager cannot appraise someone in a different Level 2 team, or any other Level 3.
Additional Teams
A user can be given permission to teams outside of their hierarchy by setting the additionalTeams values in the user's additional info (in Tools | Settings | Users | Edit User | Additional Info).
{"additionalTeams":"Sales, HR, Manufacturing"}
Team Primary manager
Where a team has many managers, one manager can be set as the primary manager for that team by setting the primaryManagerForTeam value in the user's additional info (in Tools | Settings | Users | Edit User | Additional Info)
{"primaryManagerForTeam":"IT"}
The user will:
- be shown as the manager of the team in the teams structure
- be authorized to appraise others within the same function or lower levels.
- not be appraised by anyone else at the same or lower level (only by managers from parent teams).
- every night be emailed the Change log report (see Lenses | My lens | Change log) to see all key changes made to their primary team and sub-teams.
Maintining the additional info
Note, to combine the additional teams and primary manager you could set additional info to:
{"additionalTeams":"Sales, HR, Manufacturing", "primaryManagerForTeam":"IT"}
If a team is renamed, the additional info must be maintained separately.
​
Features
The table below gives a quick guide to determine which role to give each user.

