Bruke posisjonsfilteret
This guide explains how to use the position filter to exclude specific employee positions. This is useful for automated access management, preventing users with certain roles (e.g., foster homes) from being added to access groups for unrelated services (e.g., child protective services).
How it works
The position filter removes specified positions from an employee's profile. For example, you can create a filter to remove all positions categorized as contract work, elected officials, or foster care roles. This ensures that access rights associated with these roles are not automatically assigned.
Warning: If a filtered position is the user's only primary position, their account will be left without a primary position. This can cause the main account filter to deactivate the user account.
The "Calculate primary position" function
To prevent accidental deactivation, the "Calculate primary position" function can be used. When a user's primary position is filtered out, this function automatically assigns another of their active positions as the new primary position. This ensures the user account remains active and correctly linked within the system, for instance, to their line manager.
Filter scenarios and outcomes
The outcome of filtering depends on whether the "Calculate primary position" function is active.
Scenario | Filter Result | Consequence |
|---|---|---|
The filtered position is the user's only position. | The primary position is filtered out. | The user account is processed without any positions and will likely be deactivated by the main filter. |
The filtered position is the primary position, and the user has other positions. "Calculate primary position" is inactive. | The primary position is filtered out; the secondary position is retained. | The user appears in the system without a primary position and loses the connection to their line manager. |
The filtered position is the primary position, and the user has other positions. "Calculate primary position" is active. | The primary position is filtered out; the secondary position is retained and recalculated as the new primary position. | The user appears in the system with a new, calculated primary position and maintains the connection to their line manager. |
The filtered position is a secondary position. | The secondary position is filtered out. | The user appears in the system as normal, but without the filtered secondary position. |
Example: Filtering a secondary position
In this example, an employee is a principal (primary position) but also has a secondary role as a freelance singer. We want to remove the "freelance singer" position and its associated access rights.
We can create a filter rule that removes any position where the
Position Type (Stillingstype) attribute is "O" (which corresponds to "Omsorgslønn/oppdr.ta" or "Caregiver pay/Contractor").
Before filtering: The user has two positions.
Filter configuration:
Rule Set: Position Filter
Attributt: Position Type (
Stillingstype)Condition: Is one of
Argument: O
After filtering: After the next synchronization, the secondary position is removed, along with any access associated with it.
Note: The position filter must be activated by Identum. Please contact our support team to set up a position filter for your organization.