Confined roles and the Employee role

A role limited to part of the organisation now stays limited when the person also holds the Employee self-service role.

Platform > Roles can limit a role to selected business units (Which part of the group). Before this change, a person who also held a role that reached every unit was not limited at all. Almost everyone holds Employee, which is a self-service role that only reaches the person's own leave, pay slips and approvals, so in practice the limit did not work.

Now roles that only give Employee Self Service are not counted when the system decides which units a person may reach. If the person holds no other role, they reach the whole company as before. A person who holds a limited role and another unlimited working role is still unlimited.