Secured Worker Role in CRM 8.9 and 9.0

Securing the worker information in CRM 8.9 and 9.0

Worker confidential information like National ID, Date of birth, etc should not be visible to everyone in the system except HR group.

Also for privacy reasons, Home contact methods of a person (Address, Telephone and Email) need to be secured.

Both the things can be achieved using Secured Worker Role functionality in CRM.

Navigation:
Set up CRM> Security > Secured Worker Role

On this page, Add the authorized role(E.g Role name is 'HR Manager') who can access employee/worker private data and also to what extent.

Once this is setup,any user who has the role 'HR Manager', can view worker's data in the system. No one else can!

This is a quite simple way to secure the data, but can become tricky if the contact methods are not maintained properly.
Also this works only for those person IDs who also have Worker Role (Delivered CRM role is 4)


Note:
The Record BO_CM_USE is important in this context, as the Home contact methods may be maintained for the Person Role (CRM delivered Role 1), but not for the Worker role! In this case also, there is no question of securing any Worker Data!

So If you see a person having Worker Role in your system, but on the 'Search Worker' component, if you can still see his Home address/email/Phone information, then Query the Table 'BO_CM_USE'!!