eHub: Security Groups

Security access for eHub must be set up in WinTeam SYS: Security Groups on the eHub tab. If you are not licensed for eHub, this tab will appear dimmed, meaning that it is unavailable.

An eHub Role identifies a group of screens available to Employees or Customers. Once an eHub Role is created, you can assign the eHub Role to an Employee or Customer through the Employee Master File record. eHub has three basic user roles: Customer, Base Employee and Supervisor/Admin.

Select the eHub Role check box to designate a Security Group as an eHub Role.

If you are creating a new eHub Role, you will also need to select if the Role is for Employee Self-Service (ESS) or Customer Self-Service (CSS) in the Module list. For more information see Creating eHub Roles.

For detailed information on eHub Timekeeping Security see eHub Timekeeping Security.

eHub Security Screens and Features

Security Screen Name Purpose CSS - Supervisor ESS - Employee ESS - Supervisor Feature(s)
AR Invoices Access to Invoices X   X None
FA Asset Tracking Access to the Track Asset feature     X The Track Asset feature allows you to scan bar codes to attach assets to jobs and/or work tickets. This feature is accessed from the Main view, Job view and the Work Ticket view.
HR Compliance

Access to the Compliance Code cards in web and mobile.

     X Allows supervisors to access to completed and skipped compliance code cards in the ESS module of eHub, both web and mobile.
HR Compliance Report Access to the Compliance Report X   X None
HR Employee Roster Report Access to the Employee Roster Report X   X
  • Show Employee Personal Information–Displays Employee phone number, email address and birthday (month and day only)
HR Employee Turnover Report Access to Employee Turnover X   X None
HR Hourly Benefits Access to Hourly Benefits   X X None
HR Request Time Off Access to HR Request Time Off   X X Allows employees to submit requests for time off for supervisor approval in eHub Web
  • Cannot Approve Deny Return Requests–Supervisors can view requests submitted by employee for whom they have supervisor access, but they cannot approve, deny, or return those requests to the employee. Also, the Job Number, Hours Description, and Supervisor Absence Reason fields on the employee requests are disabled for the supervisor.
  • Cannot Submit on Behalf of Employee–Supervisors can only create requests for themselves–they can view the requests submitted by employees for whom they have supervisor access in the Request Time Off list view, but they will not have the options to update or cancel those requests. Also, the Add new request button is hidden for the supervisor on the Employee tab and the message No Requests Found displays if there are no employee requests. Also, the Add button is hidden for the supervisor in the View Search
  • Do Not Auto Approve–The requests supervisors enter or update on behalf of another employee are never automatically approved. (Requests are automatically approved when they are Unpaid or Paid - Benefit Required and the benefits match with an Hours Description on the primary job.)
HR Submit Time Off Access to HR Submit Time Off     X None

INS Insurance Benefits

Access to online enrollment

X X X

Online Enrollment Employee Assistance. This feature is an online enrollment administrator "proxy" capability, which allows users with appropriate permission to log in to Insurance Benefits and assume the identity of all eligible enrollees.

Warning:  When using the Online Enrollment Employee Assistance feature, this disregards employee security levels.
INV Requests Access to Inventory Requests     X
  • Can Add Requests–Allows Supervisors to create inventory requests in mobile.
JB Job Profiles Access to Job Profile. When this screen is selected, the job contact information (address and phone 1,2,3) and map for the job location display in eHub Mobile. X X X

  • Can Add Other Billing (mobile only)–Allows you to enter Other Billing information for a specific job in the Mobile application.

  • Can Edit Job Instructions–Allows the user to make changes to the job instructions on eHub web. The Show Job Instructions security feature must be selected before you can select this editing feature.

  • Can Share Job Profile–Allows the user to share the job profile on eHub web and mobile.

  • Show Contacts–Allows users to view contact information. When this feature is selected, the link for Additional Contacts displays in eHub Mobile.
  • Show Job Instructions–Allows the user to see the job instructions on eHub web and mobile.
  • Show Notes

  • Show Notes on Keys or Security

PAY Employee Profiles Access to Employee Profiles     X
  • Change Address Information–Allows user to submit a request to change employee address information
  • Change Contact Information–Allows user to submit a request to change employee contact information
  • Change Pay Rate–Allows user to submit a request to change employee pay rate
  • Change Primary Job–Allows user to submit a request to change employee primary job
  • Change Status Information–Allows user to submit a request to change employee status information
  • Edit Emergency Contact Information–Allows a Supervisor user to edit their employees' emergency contact information
  • Require Notes–Requires supervisors to add a note when submitting a Status Change, Primary Job Change, or Pay Rate Change. This security feature is cleared by default.
  • View Benefit Category–Allows a Supervisor user to view their employees' Benefit Category (from the Other Info tab of the EMF)
  • View Classification–Allows a Supervisor user to view their employees' Classification (from the General tab of the EMF)
  • View Emergency Contact Information–Allows a Supervisor user to view their employees' emergency contact information
  • View Employee Supervisor–Allows a Supervisor user to view the name of the person who is the supervisor for an employee
  • View Employee Title–Allows a Supervisor user to view their employees' title (from the General tab of the EMF)
  • View Employee Type–Allows a Supervisor user to view their employees' type (from the General tab of the EMF)
  • View Hire Date–Allows user to view employee hire date
  • View Pay Rate–Allows user to view employee pay rate
  • View Primary Job–Allows user to view employee primary job
  • View Service Credit Date–Allows user to view employee service credit date
  • View Status–Allows user to view employee status
PAY My Profile Access to My Profile   X X
  • Change Address Information–Allows user to submit a request to change their own address information
  • Change Contact Information–Allows user to submit a request to change their own contact information. This will also give user access for the request via eHub mobile.
  • Edit Emergency Contact Information–Allows a user to edit their own emergency contact information
  • View Emergency Contact Information–Allows a user to view their own emergency contact information
  • View Tax Information–Allows users to view their own tax information
  • View/Change W2 Electronic Receipt Status–Allows users to view or change the electronic method in which they receive W2 receipts
PAY Paycheck History Access to Paycheck History   X X
  • Allow Employee Lookup–Enables supervisors/admins to look up paycheck history for employees assigned to them
PAY Tax Forms Access to W2 History and 1095-C forms.   X X
  • Allow Employee Lookup–Enables supervisors/admins to look up W2 and 1095-C history for employees assigned to them.
PAY Wage Summary Access to Wage Summary which provides employees access to see their pay rate details by job and shift.   X X None
PS Approve Time Worked Access to Approve Time Worked   X X None
PS Create Personnel Requests Access to Create Personnel Requests X   X None
PS Hours Budget Comparison Report Access to the Hours Budget Comparison Report     X
  • Show Pay Rate–Includes employee pay rates in report
PS Personnel Requests Access to Personnel Requests in Personnel Scheduling X   X

None
PS Personnel Scheduling Access to Personnel Scheduling   X X
  • Can Borrow Employee
  • Allow Inserting of Shifts
  • Can Offer Position (5.X Only)
  • Can Override Compliance Requirements (5.X Only)
  • Can Override Job Post Requirements (4.X Only)
  • Can Override Overlapping Times
  • Can Override Overtime
  • Can Override Post Pay Rate (5.X Only)
  • Hide Pay Rate - Hides the pay rate column in the Search for Eligible Employee view
  • Read-Only
  • Review Schedule Confirmation
PS Schedule Report Access to the Schedule Report X X X View Master Schedule–Allows user to view master schedule
PS Scheduling Activity Report Access to the Scheduling Activity Report     X None
PS Supervisor Review Access to the Supervisor Review     X None
QA Checkpoints Access to Checkpoints X X X
  • Cannot Choose Existing Images
  • Change Completed Checkpoint–Allows user to edit Checkpoints that have been completed and published to eHub
  • Read-Only–User can view completed Checkpoints but cannot create, edit or finish Checkpoints. If assigned with 'Can Change Completed Checkpoints' this feature takes precedence.
QA Checkpoint Summary Access to Checkpoint Summary X   X None
QA Deficiency Review Access to Deficiency Review X   X
  • Cannot Close Deficiency–User can view deficiencies but cannot close them
SS Action Items Access to Action Items X X X None
SS Change Password Access to Change Password X X X None
SS My Employee Requests Access to Employee Requests   X X Allows user to access employee requests, (addr, phone/email, pay rate, primary job and status).
SS Portal Setup Access to Portal Setup X X X None
SS Query Scheduler Access to Query Scheduler   X X None
SS Site Usage Access to Site Usage   X X None
SS User Preferences Access to User Preferences in Personnel Scheduling X X X
  • Can View/Edit SMS Preferences–To allow employees to opt in to receive SMS text messages
TeamTime Status Access to TeamTime Status. Allows eHub Mobile Users to view TeamTime Status in 'real-time'. X   X None
TK Timekeeping Access to Timekeeping   X X

As a default, if this screen is assigned to a Supervisor Security Group and no screen features are selected, the supervisor is able to view and edit the timekeeping records for employees of jobs they supervise, but not their own time records.

  • Auto-Approve Changes–Automatically approves any changes to Timekeeping submitted by the user
  • Can Approve Others' Changes–
  • Can Edit Previous Day's Locked Records-Allows a supervisor to edit timekeeping records in eHub web and mobile that have been locked
  • Can Enter Own Time–Allows user to enter their own time in eHub Timekeeping
  • Can Split TK Records - Supervisors can split a timekeeping record into multiple records.
  • Cannot Edit Punches - Restricts the supervisor from editing the In/Out and the Total Hours field values. They still can edit the Hours Description, Change Reason and Notes fields.
  • Work Tickets Must Match Timekeeping Job–
  • Edit Work Ticket on Locked Records–When selected, the user can enter the Work Ticket Number on a locked record.
  • Read-Only–User can open and view the screen but cannot make changes.
TT Mobile Punching Disables access to TeamTime on mobile devices.

This is useful when employees clock in through other means such as Lighthouse, FINDD, and other providers through the API.

This security setting is enabled by default for all ESS roles. It is not available for CSS roles. To remove eHub Mobile TeamTime access from an ESS role, simply remove this eHub security screen from the security group.

   X X None
TT Punch Overview Access to TeamTime widget which contains punch action status. Also, access to call review and exception tracking features.     X None
WS Create Work Requests Access to Work Requests. Enables user to add new work requests. X   X None
WS Create Work Requests Access to Create Work Requests X   X None
WS Work Requests

Access to employee work request in My Requests. ESS Work Request Admin Enables an admin user to view and approve requests submitted, regardless of whether the user is an Assignee in the Workflow of the request.

 X X X None
WS Work Scheduling Access to Work Scheduling X   X

Note:  These features apply to both eHub Web and eHub Mobile

  • Cannot Add Work Ticket - Supervisor with this feature can not create a work ticket from a mobile device
  • Change Actuals - Supervisor with this feature must also have "View Actual" feature in order to add or edit Actuals
  • Change Budgets - Supervisor with this feature must also have "View Budgets" feature in order to add or edit Budgets
  • Done Tickets are Read-Only - Employees with this feature cannot make changes to a Work Ticket once the Status has been changed to Done.
  • View Actuals - Supervisor and CSS user with this feature can only view actual records
  • View Budgets - Supervisor with this feature can only view budget records