Using the Position Filter
This guide explains how to use the position filter to exclude specific employee positions when an employee is imported to eADM. This is useful for automated access management, preventing users with certain roles (e.g., foster homes) from being accidentally added to access groups for related services (e.g., child protective services).
How it works
The position filter removes specified roles from an employee's profile, which is especially beneficial for public sector clients where individuals often hold multiple positions or roles.
For instance, an employee, like a teacher, may also serve as a foster parent or be elected to the local council.
You can set up a filter to exclude roles such as contract work, elected officials, or foster care positions. Such roles typically appear in a municipality’s HR system only because they are eligible for some form of compensation, but are not “employed positions” in a traditional sense and should not qualify for any system access.
The position filter effectively eliminates any positions that should not be considered for role-based access control, retaining only the relevant positions, such as the “teacher” role. This ensures that excluded positions are not assessed for role-based access management.
Warning: If a filtered position is the user's only position, their account will be left without a primary position. This can cause the main account filter to deactivate the user account.
The "Calculate primary position" function
To prevent accidental deactivation, the "Calculate primary position" function can be used. When a user's primary position is filtered out, this function automatically assigns another of their active positions as the new primary position. This ensures the user account remains active and correctly linked within the system, for instance, to their line manager.
Filter scenarios and outcomes
The outcome of filtering depends on whether the "Calculate primary position" function is active.
Scenario | Filter Result | Consequence |
|---|---|---|
The filtered position is the user's only position. | The primary position is filtered out. | The user account is processed without any positions and will likely be deactivated by the main filter. |
The filtered position is the primary position, and the user has other positions. "Calculate primary position" is inactive. | The primary position is filtered out; the secondary position is retained. | The user appears in the system without a primary position and loses the connection to their line manager. |
The filtered position is the primary position, and the user has other positions. "Calculate primary position" is active. | The primary position is filtered out; the secondary position is retained and recalculated as the new primary position. | The user appears in the system with a new, calculated primary position and maintains the connection to their line manager. |
The filtered position is a secondary position. | The secondary position is filtered out. | The user appears in the system as normal, but without the filtered secondary position. |
Example: Filtering a secondary position
In this example, an employee is a principal (primary position) but also has a secondary role as a freelance singer. We want to remove the "freelance singer" position and its associated access rights.
We can create a filter rule that removes any position where the
Position Type (Stillingstype) attribute is "O" (which corresponds to "Omsorgslønn/oppdr.ta" or "Caregiver pay/Contractor").
Before filtering: The user has two positions.
Filter configuration:
Rule Set: Position Filter
Attribute: Position Type (
Stillingstype)Condition: Is one of
Argument: O
After filtering: After the next synchronization, the secondary position is removed, along with any access associated with it.
Note: The position filter must be activated by Identum. Please contact our support team to set up a position filter for your organization.