Disable users from changing email in SSO

Question

We want to be able to allow users access to "User Hours". Unfortunately Role permission to change it is grouped under "User Info" permission which contains other fields we can not allow users to change.

We disables "User Info" to prevent users from changing their account email address in our SSO environment. If they do that, they are unable to sign-in via campus SSO and they loose access to their RC account.

Some items underneath User Info->Settings and Permissions are appropriate and very useful to end users. For instance "User Hours".

Is there another way, or future plans, to allow users access "User Hours" without also allowing them to change the account email?

Anonymous · Accepted Answer

Hello @Dean Eckstrom! Yes, you can do that! By doing custom roles for your employees.  Click HERE for more info. Thank you!

Dean2316896015 · Answer

Jenn;The 'User Info' permission applies Equally to these attributes of concern:email address. - we want to disallow updatespassword/pin - we want to allow updatesuser hours - we want to allow updateshow does one Allow password and User hours, but Disallow updates to eMail? They are all part of 'User Info' role permission. The permission assignment needs more 'granularity'.This is extremely critical in an SSO environment where login is based on email address. If a user changed email, they break their account access based on our testing. It also causes IT administrative headaches to correct API problems that result.A general security philosophy is "Do not give users access to things that break things". Our user community has already, and will continuously, change this field if the App lets them.For this reason we had to shut off User Info. However there are critical user features such as 'User Hours' and 'PIN Reset' (including via *86) that are also disabled by this permission setting.

Reply

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded