How WFM data permissions work

There are two types of permissions in WFM, function permissions and data permissions. The configuration of the data permissions control what data the user can access.

Data is all information related to the users; their names, schedule, reporting data etc.

The data permissions always need to be combined with function permissions to define what functionality the user can access for that data.

Data permissions can be dynamic or static. This means you can set up an agent role with permissions to access specific teams or sites, with permissions to access the team or site which the agent belongs to or a combination of those.

Dynamic data permissions

Dynamic data permissions are useful to reuse roles across different teams and sites as they are based on the team and site the user belongs to. If the user changes teams, the access is automatically changed to the new team from the first day of the new period.

EXAMPLE An agent with MyTeam data permissions for viewing schedules can see their team's shifts in the team view. If the agent moves to a new team on June 1st, they can see the current team's shifts up until May 31st, and on June 1st they can see the shifts of their new team.

NOTE A user who doesn't have an active person period with a site and team assigned cannot get data access through dynamic data permissions.

Dynamic data permissions are set by selecting a global level of authorization in the permissions view.

There are five access levels to dynamic data.

MyOwn—The users can only see their own data.
MyTeam—The users can see the team members of their own team and their data.
MySite—The users can see data for the site they belong to, that is data for all teams and team members on that site.
MyBusinessUnit—The users can see data for the whole business unit they belong to, that is all sites, all teams and team members on that business unit.
Everyone—The user has full access to all data.

Static data permissions

Static data permissions are used to give access to specific business units, sites or teams. This is the only way to assign data permissions to users who do not belong to a team. Static data permissions are also useful if there is one particular team or site that a group of users should have access to, regardless of which team these users are in.

The static permissions are not affected by user changes. If the user is moved to a different team, the static permissions do not change.