Adding or Updating a Role
- Search - allows search by object/field name (for Object and Field Access)
- Remove role from all users - if any users are assigned to this role, this option will automatically un-assign from all users
- Show only checked off rights - to quickly see what role rights have been enabled or to remove role rights, this option will filter out only rights that have been toggled ON
Role Rights
All role rights (as of the 13.1 release) are listed below with a short description and any specific call outs to indicate what the role right controls within Compose. If you do not see a role right listed below, your Comp Admin role needs to be updated to include the role right. Please note that some role rights, like Predictive Comp Planning, may be part of a phased roll out and are not yet available for your tenant. For more information or specific questions, please log a ticket in Teamwork Desk.
Name
& Rank | |
Role
Name | Name
of Role as it displays in the Users page and all audits and reports |
Rank | Rank
indicates ability to access and edit other roles. The lower the number, the
higher the rank |
Default
Page | Indicates
which page of Compose the user will land on upon logging in |
Home
Page | Specifies
a custom page that will display on the "Home" tab |
Object
and Field Access | |
Object
Name | Options
vary based on client-specific setup |
Field
Name | Options
vary based on client-specific setup |
Editable | Options
vary based on client-specific setup |
System
Access | |
Can
log into Compose | Can
access Compose through SSO or username/password set up |
Can
view own records | Can
view themselves in the Comp Grid (manager side) and Data Management (Admin
side). User must have an Employee of record assigned |
Grant
access to direct and indirect employees by default | Can
see their full hierarchy of reports based on the Supervisor hierarchy
field. User must have an Employee of record assigned |
Ignore
objects security configuration | **
Reserved for Admin Roles ONLY |
Can access all
entries on all objects | Can
see all data on all objects automatically. No individual field or employee
access needs to be granted |
Can access all
fields on all objects | Can
see all fields on all objects automatically. No individual field access needs
to be granted |
Can access all
reports | Can
see all reports created by any user in Compose automatically . No individual
report access needs to be granted. |
Can access all
custom pages | Can
see all custom pages created by any user in Compose automatically. No
individual custom page access needs to be granted. |
Can access all FBS
widgets | Can
see all Filtered Budget Summary widgets created in any Comp Cycle by any user
in Compose automatically . No FBS widget access needs to be granted. |
Filters | |
Can
assign saved filters | Can
create a saved population filter view in the Comp Grid and assign it to other
roles |
Proxies | |
Can
act as proxy for other users | Gives
access to the Act on Behalf of option in user menu. This role right is
required to allow other users to proxy as a user in this role according to
security access. If no other "proxy" role rights are selected,
proxy access must be granted directly to each user. |
Can
create proxies for other users | If
user has access to proxy to other people, they can assign user(s) to proxy on
behalf of this person for a specified time |
Has
access to all proxy users | Allows
the user to proxy as any user in any role with "Can act as proxy for
other users". NOTE: this bypasses any security restrictions and will
allow the user to proxy as users assigned to Employees they may not have
access to. It is recommended to reserve this role right for users who are
able to have access to the entire organization. |
Can
proxy to other users if security settings allow | User
can act on behalf of users of employees they have access to see, whether
through hierarchy assignment or specific employee access |
Can
view own records while proxying | User
can see themself while proxying on behalf of someone else if that person can
see the logged in user. If this is selected, this overrides 'Can view own
record' above if that is not granted. |
Has
access to Compose AI | User
can ask Compose AI questions via the lightbulb icon (top right). Security
settings apply |
Has
access to API | Has
access to the API Configuration section for UKG/Paycor API setup in System
Settings |
Can
access Compose University | Authenticates
to Compose University via SSO in the User drop-down menu. This role right
grants access to the "Intro to Comp Grid" course only |
Can
access Compose University as Admin | Authenticates
to Compose University via SSO in the User drop-down menu. This role right
grants access to ALL Compose University courses |
Compose
Insights | |
Has
access to Compose Insights Chat | Grants
access to the "lightbulb" icon to use Compose Insights AI |
Has
access to Compose Insights Chat Data | Can
access data query/visualization AI Agent |
Has
access to Compose Insights Chat How-To Guide | Can
access Compose Support/"How-To" AI Agent |
Has
access to Compose Insights Chat Plan Setup | Can
access Configuration Help AI Agent |
Can
configure predictive planning | Has
access to Predictive Comp configuration in System Settings |
Additional
Settings | |
Has
access to "Comp Cycle" dropdown | On the
Comp Grid, Custom Pages, Reports, user can change the comp cycle display from
the default. Security settings apply to who/what they have access to see in
the grid |
Has
access to "Currency" dropdown | On the
Comp Grid, Custom Pages, Reports, user can change the currency for values
displayed in comp grid |
Has
access to model comp cycles in the "Comp cycle" dropdown | User
can see cycles marked as 'Model' by admins (ie. Training, Test) |
Can
comment on exceptions justifications | User
can add comments to Alert pop ups |
Can
delete comment on exceptions justifications | User can
delete comments to Alert pop ups including comments not entered by logged in
user |
Has
access to view employee files in Comp Grid table and People page | User
can view/download files attached to employees |
Has
access to upload employee files in Comp Grid table and People page | User
can upload external files directly to an employee |
Has
access to delete employee files in Comp Grid table and People page | User
can delete external files attached to an employee |
Has
access to upload employee image in People page | User
can upload an external image to an employee on the People page, security and
access settings apply |
Can
edit hierarchy field configuration | Allows
user to configure up to 3 additional metadata fields in the hierarchy chart
for all hierarchy fields in Data Management |
Can
require remote signature | Allows
user to run reports to email via DocuSign for signature. Requires DocuSign
configuration in System Settings |
Can
require embedded signature | Allows
user to request a signature in Compose directly via Employee File field for
any uploaded document or any individual report sent to Employee Files
(without remote Signature). Requires DocuSign configuration in System
Settings. NOTE: This option only includes the employee as a single
signer and does not allow multi-signer workflow. |
View
custom page visuals in compact mode | Reduces
padding between custom page widgets |
Access
to Pages | |
Manager
View | |
Home
page | User
can access the Home Page via link in the navigation ribbon with custom page
selected in the Name & Rank section. NOTE: If no Home Page
set in Name & Rank, the Home screen will be blank and an error will
display that no page has been selected. |
Comp
grid page | |
Recommend | User
can see the Recommend tab within the Comp Grid |
Review | User
can see the Review tab within the Comp Grid |
Analyze | User
can see the Analyze tab within the Comp Grid |
People
page | User has
access to the People tab in the navigation ribbon |
Reports
page (Manager) | User
has access to the Reports tab in the navigation ribbon |
Budgets
page | User
has access to the Budgets tab in the navigation ribbon |
Can
allocate over budget | Allows
a user to enter subordinate Allocated Budget values greater than higher level
Allocated Budget |
Has
access to see all budget pools | Allows
a user to see all budget pools regardless of security access to Employee
records |
Can
export budgets | Can
export the Budget Allocation hierarchy view into Excel. Removing this role
right removes the "Export to Excel" button on the page. |
Can
import budgets | Can
import Budget Allocation hierarchy values. NOTE: Requires access to
Admin>Data Management import view |
Can
edit budget allocation | Can
add/change values entered in Allocated Budget column (Dollar/Unit budget) or
Calculated Amount (Percentage budget) column |
Can
edit holdback | Can
add/change values entered in Holdback Amount column |
Can
edit reserve for pool | Can
add/change values entered in Reserve for Pool column |
Can
edit budget percent | Can
change the Allocated Budget % in a Percentage budget setup |
Can
edit budget type | Can
switch to a different budget type in the drop-down menu |
Can
add budget recipients | Can
add additional budget recipients to the hierarchy |
Can
delete budget recipients | Can
delete existing budget recipients |
Can
reassign budget | Can
reassign budget of an existing budget recipient to another |
Can
reset override | Can
clear any overriden values in a Percentage budget setup. Removing this role
right removes the "Reset Override" button on the page. |
Can
reset all budgets | Can
clear all budget values out entirely. Removing this role right removes the
"Reset All" button on the page. NOTE: resetting all budgets
cannot be undone. |
Can
distribute to lower pools | Can
distribute Allocated Budget amount evenly across all direct subordinate recipients.
Removing this role right removes the "Distribute to Lower Pools"
button on the page. NOTE: distributing to lower pools cannot be
undone. |
Custom
Pages | |
Page
Name | Options
vary based on client-specific setup |
Admin
View | Grants
access to Admin side of Compose |
Comp
Cycle page | Grants
access to Comp Cycle tab on Admin side |
Can
create new cycle | Grants
acess to create new comp cycles |
Can
view comp cycle details | Grants
access to click into a comp cycle |
Can
view budget allocation | User
can see Budget Allocation tab within a specific comp cycle |
Can
create a copy of cycle | User
can copy an existing Comp Cycle set up |
Object
Management page | |
Can
manually recalculate object | Grants
access to recalculate all fields on an object |
Can
edit system object properties | Can
add/edit Display Field, Import Field, Primary Key field(s), Employee of
Record, Comp Cycle of Record, Time Series Flag, Security Flag, View in Data
Management Flag, and Disable Calcs Flag |
Grids
page | Grants
access to Configuration - Grids |
Can
create & modify system grid views | Can
create and modify grids where Access Rights = "System" |
Can
create & modify group grid views | Can
create and modify grids where Access Rights = "Group" |
Alerts
page | Grants
access to Configuration - Alerts to create and modify alerts |
Data
Management page | |
Resource
Center page | User
can access Resource Center to view/modify/add/delete Currency Schedules |
View
imports history | User can
see all imports by any user including errors |
Can
schedule imports | User
has access to create and edit import schedules either from an API or SFTP.
Requires API and/or SFTP Configuration in System Settings |
Can
access imported files | User
can download files imported by any user |
Can
import | Grants
access to import files to all objects according to role security settings |
Can
download data | Grants
access to download object data according to role security settings |
Can
manage templates | User
can create, modify, delete import and export templates |
User
can import security settings | Gives
access to import user specific security. NOTE: this import does not
create user accounts. All users must exist prior to importing security
settings. |
Can
import proxy users | User
can import proxy user assignments |
Can
export API Data | User
can export data via Compose API or Paycor/UKG Api. Requires API Configuration
in System Settings |
User
Management page | |
Can
create/modify users | User can
add new users or modify existing users, security settings and role rank
rights apply |
Can
remove role from all users | User
can remove all users from roles they have access to |
Can
delete user | User
can delete any existing user account. Deleted accounts show up with
"-(deleted)" appended to username in all audit logs and modified
system settings |
Can
manage roles | User
can modify role settings for ranks below their own role |
Can
manage groups | User can
add, modify or delete role groups |
Automated
Users page | User
can add, modify or delete automated user groups that create new users based
on specified criteria |
Can
manage external API users | User
can add, modify, or delete external API users. Applies to Compose API, not
UKG/Paycor APIs |
Report
page (Admin) | Grants
access to Configuration - Reports, specific template access must to granted
to modify reports |
Custom
pages | Grants
access to Configuration - Custom Pages to create, modify or delete custom
pages |
Automations
page | Grants
access to Configuration - Automations to create, modify or delete Automations |
Can
change batch interval | User
can update the amount of time data is processed after a trigger criteria is
met before kicking off the automation |
Can
create copy of automation | User
can copy an existing Automation and modify as needed |
Can
trigger manually | User
can manually run an automation |
Settings
page | User
can access Configuration - Settings, including activating currencies |
System
Status page | User
can access Configuration - Settings to view current events running or events
that ran in the last 72 hours (ie. Calculations, Automations, etc) |
Notifications | Grants
access to the Bell icon at the top right to view messages, exception
notifications and reports run by logged in user |
Can
send messages in Notifications page | User can
send messages within Compose to their role or any role with a rank below |
Broadcast
Messages page | Grants
access to Broadcast Messages tab to create, modify or delete messages to
Compose users |
Report
Access | |
Run
reports in browser immediately while you wait | Allows
option to run a report and have it open immediately instead of going to
Complete Reports to download. Applies to both Admin side and Manager side, as
access allows |
Excel
Report Access | Grants
access to see Excel Template in the Run New Report dropdown and download the
Excel Template reports they have access to |
Report
Template Access | Assign
which Reports the user can see under the Reports tab or in the Reports
button, based on access to those areas |
Report
Name | Options
vary based on client-specific setup |
Data
Sources Access | Related
to report writing tool, DevExpress |
Can
access objects | Can
access all objects as a data source when building a report in
DevExpress, security access still applies
to data displayed in a report run |
Can
access audit | Can
access all audits as a data source when building a report in DevExpress |
Can
access budget allocation | Can
access budget allocations as a data source when building a report in
DevExpress, security access still applies to data displayed in a report run |
Can
access user info | Can
access user data as a data source when building a report in DevExpress |
Can
access docusign | Can
use Docusign as a data source when building a report in DevExpress |
Can
access email statuses | Can
access email statuses from SendGrid as a data source when building a report
in DevExpress |
Alerts
Rights | |
Alerts
allow admin override | If an
Alert has "Allow Admin Override" checked, data will still save for
the user despite alert being triggered |
Comp
Grid Page Rights | |
View
eligible budget | Grants
user access to the 3 dots next to the employees' names to see individual
employee's allocated budget numbers |
View
events log | Grants
user access to the 3 dots next to the employees' names to see an audit trail
of changes to grid data |
View
employee details | Grants
user access to the 3 dots next to the employees' names to navigate directly
to the People page for that employee |
View
predictive planning results | User
can view predictive planning results previously run for individual users.
Requires Predictive Planning configuration in System Settings |
Budget
Summary | Assign
which Filtered Budget Summary widgets the user can see in the Comp Grid |
Budget
Widget Name | Options
vary based on client-specific setup |
Recommend | |
Has
access to "Grid Type" dropdown | On the
Comp Grid, user can change the Grid Type display from the default. Grid
access settings apply to which grids the user can select |
Has
access to "Export" button | User
can export the current Comp Grid view to excel, including Population Filter
and Currency selection |
Has
access to "Reports" button | User
can access Reports from a button on the Comp Grid instead of clicking on the
Reports tab, specific report access must be granted |
Has
access to "Grid Settings" button | Grants
user access to add, remove, or rearrange fields in their own grid view. Field
availability depends on field access granted |
Can
access "Filtered Budget Summary" | Grants
access to see Filtered Budget Summary on the grid, specific widget access
must be granted |
Can
reset overriden values | User
can revert an overriden value to the original calculated value |
Can
see overriden values | User
can see overridden values in bold on the Comp Grid with Edited as hover over
text |
Can
run individual predictive planning | User
can re-run Predictive Compensation for individual employee. Requires
Predictive Planning configuration in System Settings |
Can
run predictive planning | User
can re-run Predictive Compensation for all employees. Requires Predictive
Planning configuration in System Settings |
Review | |
Submit
workflow population partially | When
Review Chain is setup, user can submit segments of their hierarchical population
without having to submit everyone at the same time |
User
can edit grid after workflow has been submitted | Grants
access for user to make edits to their population even after submitted
through review chain for approval |
Can
submit before lower-level submission | Allows
Planning Managers in Review Chain hierarchy to approve before subordinates
have submitted up to the current level. Enabling this allows users to skip
approval levels. |