eHub: Security Groups (2024)

AR Invoices Access to Invoices X X None FA Asset Tracking Access to the Track Asset feature X The Track Asset feature allows you to scan bar codes to attach assets to jobs and/or work tickets. This feature is accessed from the Main view, Job view and the Work Ticket view. HR Compliance

Access to the Compliance Code cards in web and mobile.

X Allows supervisors to access to completed and skipped compliance code cards in the ESS module of eHub, both web and mobile. HR Compliance Report Access to the Compliance Report X X None HR Employee Roster Report Access to the Employee Roster Report X X
  • Show Employee Personal Information–Displays Employee phone number, email address and birthday (month and day only)
HR Employee Turnover Report Access to Employee Turnover X X None HR Hourly Benefits Access to Hourly Benefits X X None HRRequest Time Off Access to HR Request Time Off X X Allows employees to submit requests for time off for supervisor approval in eHub Web
  • Cannot Approve Deny Return Requests–Supervisors can view requests submitted by employee for whom they have supervisor access, but they cannot approve, deny, or return those requests to the employee. Also, the Job Number, Hours Description, and Supervisor Absence Reason fields on the employee requests are disabled for the supervisor.
  • Cannot Submit on Behalf of Employee–Supervisors can only create requests for themselves–they can view the requests submitted by employees for whom they have supervisor access in the Request Time Off list view, but they will not have the options to update or cancel those requests. Also, the Add new request button is hidden for the supervisor on the Employee tab and the message No Requests Found displays if there are no employee requests. Also, the Add button is hidden for the supervisor in the View Search
  • Do Not Auto Approve–The requests supervisors enter or update on behalf of another employee are never automatically approved. (Requests are automatically approved when they are Unpaid or Paid - Benefit Required and the benefits match with an Hours Description on the primary job.)
HR Submit Time Off Access to HR Submit Time Off X None

INS Insurance Benefits

Access to online enrollment

X X X

Online Enrollment Employee Assistance. This feature is an online enrollment administrator "proxy" capability, which allows users with appropriate permission to log in to Insurance Benefits and assume the identity of all eligible enrollees.

Warning: When using the Online Enrollment Employee Assistance feature, this disregards employee security levels.

INV Requests Access to Inventory Requests X
  • Can Add Requests–Allows Supervisors to create inventory requests in mobile.
JB Job Profiles Access to Job Profile. When this screen is selected, the job contact information (address and phone 1,2,3) and map for the job location display in eHub Mobile. X X X
  • Can Add Other Billing (mobile only)–Allows you to enter Other Billing information for a specific job in the Mobile application.

  • Can Edit Job Instructions–Allows the user to make changes to the job instructions on eHub web. The Show Job Instructions security feature must be selected before you can select this editing feature.

  • Can Share Job Profile–Allows the user to share the job profile on eHub web and mobile.

  • Show Contacts–Allows users to view contact information. When this feature is selected, the link for Additional Contacts displays in eHub Mobile.
  • Show Job Instructions–Allows the user to see the job instructions on eHub web and mobile.
  • Show Notes
  • Show Notes on Keys or Security

PAY Employee Profiles Access to Employee Profiles X
  • Change Address Information–Allows user to submit a request to change employee address information
  • Change Contact Information–Allows user to submit a request to change employee contact information
  • Change Pay Rate–Allows user to submit a request to change employee pay rate
  • Change Primary Job–Allows user to submit a request to change employee primary job
  • Change Status Information–Allows user to submit a request to change employee status information
  • Edit Emergency Contact Information–Allows a Supervisor user to edit their employees' emergency contact information
  • Require Notes–Requires supervisors to add a note when submitting a Status Change, Primary Job Change, or Pay Rate Change. This security feature is cleared by default.
  • View Benefit Category–Allows a Supervisor user to view their employees' Benefit Category (from the Other Info tab of the EMF)
  • View Classification–Allows a Supervisor user to view their employees' Classification (from the General tab of the EMF)
  • View Emergency Contact Information–Allows a Supervisor user to view their employees' emergency contact information
  • View Employee Supervisor–Allows a Supervisor user to view the name of the person who is the supervisor for an employee
  • View Employee Title–Allows a Supervisor user to view their employees' title (from the General tab of the EMF)
  • View Employee Type–Allows a Supervisor user to view their employees' type (from the General tab of the EMF)
  • View Hire Date–Allows user to view employee hire date
  • View Pay Rate–Allows user to view employee pay rate
  • View Primary Job–Allows user to view employee primary job
  • View Service Credit Date–Allows user to view employee service credit date
  • View Status–Allows user to view employee status
PAY My Profile Access to My Profile X X
  • Change Address Information–Allows user to submit a request to change their own address information
  • Change Contact Information–Allows user to submit a request to change their own contact information. This will also give user access for the request via eHub mobile.
  • Edit Emergency Contact Information–Allows a user to edit their own emergency contact information
  • View Emergency Contact Information–Allows a user to view their own emergency contact information
  • View Tax Information–Allows users to view their own tax information
  • View/Change W2 Electronic Receipt Status–Allows users to view or change the electronic method in which they receive W2 receipts
PAY Paycheck History Access to Paycheck History X X
  • Allow Employee Lookup–Enables supervisors/admins to look up paycheck history for employees assigned to them
PAY Tax Forms Access to W2 History and 1095-C forms. X X
  • Allow Employee Lookup–Enables supervisors/admins to look up W2 and 1095-C history for employees assigned to them.
PAY Wage Summary Access to Wage Summary which provides employees access to see their pay rate details by job and shift. X X None PS Approve Time Worked Access to Approve Time Worked X X None PS Create Personnel Requests Access to Create Personnel Requests X X None PS Hours Budget Comparison Report Access to the Hours Budget Comparison Report X
  • Show Pay Rate–Includes employee pay rates in report
PS Personnel Requests Access to Personnel Requests in Personnel Scheduling X X

None

PS Personnel Scheduling Access to Personnel Scheduling X X
  • Can Borrow Employee
  • Allow Inserting of Shifts
  • Can Offer Position (5.X Only)
  • Can Override Compliance Requirements (5.X Only)
  • Can Override Job Post Requirements (4.X Only)
  • Can Override Overlapping Times
  • Can Override Overtime
  • Can Override Post Pay Rate (5.X Only)
  • Hide Pay Rate - Hides the pay rate column in the Search for Eligible Employee view
  • Read-Only
  • Review Schedule Confirmation
PS Schedule Report Access to the Schedule Report X X X View Master Schedule–Allows user to view master schedule PS Scheduling Activity Report Access to the Scheduling Activity Report X None PS Supervisor Review Access to the Supervisor Review X None QA Checkpoints Access to Checkpoints X X X
  • Cannot Choose Existing Images
  • Change Completed Checkpoint–Allows user to edit Checkpoints that have been completed and published to eHub
  • Read-Only–User can view completed Checkpoints but cannot create, edit or finish Checkpoints. If assigned with 'Can Change Completed Checkpoints' this feature takes precedence.
QA Checkpoint Summary Access to Checkpoint Summary X X None QA Deficiency Review Access to Deficiency Review X X
  • Cannot Close Deficiency–User can view deficiencies but cannot close them
SS Action Items Access to Action Items X X X None SS Change Password Access to Change Password X X X None SS My Employee Requests Access to Employee Requests X X Allows user to access employee requests, (addr, phone/email, pay rate, primary job and status). SS Portal Setup Access to Portal Setup X X X None SS Query Scheduler Access to Query Scheduler X X None SS Site Usage Access to Site Usage X X None SS User Preferences Access to User Preferences in Personnel Scheduling X X X
  • Can View/Edit SMS Preferences–To allow employees to opt in to receive SMS text messages
TeamTime Status Access to TeamTime Status. Allows eHub Mobile Users to view TeamTime Status in 'real-time'. X X None TK Timekeeping Access to Timekeeping X X

As a default, if this screen is assigned to a Supervisor Security Group and no screen features are selected, the supervisor is able to view and edit the timekeeping records for employees of jobs they supervise, but not their own time records.

  • Auto-Approve Changes–Automatically approves any changes to Timekeeping submitted by the user
  • Can Approve Others' Changes
  • Can Edit Previous Day's Locked Records-Allows a supervisor to edit timekeeping records in eHub web and mobile that have been locked
  • Can Enter Own Time–Allows user to enter their own time in eHub Timekeeping
  • Can Split TK Records - Supervisors can split a timekeeping record into multiple records.
  • Cannot Edit Punches - Restricts the supervisor from editing the In/Out and the Total Hours field values. They still can edit the Hours Description, Change Reason and Notes fields.
  • Work Tickets Must Match Timekeeping Job
  • Edit Work Ticket on Locked Records–When selected, the user can enter the Work Ticket Number on a locked record.
  • Read-Only–User can open and view the screen but cannot make changes.
TT Mobile Punching Disables access to TeamTime on mobile devices.

This is useful when employees clock in through other means such as Lighthouse, FINDD, and other providers through the API.

This security setting is enabled by default for all ESS roles. It is not available for CSS roles. To remove eHub Mobile TeamTime access from an ESS role, simply remove this eHub security screen from the security group.

X X None TT Punch Overview Access to TeamTime widget which contains punch action status. Also, access to call review and exception tracking features. X None WS Create Work Requests Access to Work Requests. Enables user to add new work requests. X X None WS Create Work Requests Access to Create Work Requests X X None WS Work Requests

Access to employee work request in My Requests. ESS Work Request Admin Enables an admin user to view and approve requests submitted, regardless of whether the user is an Assignee in the Workflow of the request.

X X X None WS Work Scheduling Access to Work Scheduling X X

Note: These features apply to both eHub Web and eHub Mobile

  • Cannot Add Work Ticket - Supervisor with this feature can not create a work ticket from a mobile device
  • Change Actuals - Supervisor with this feature must also have "View Actual" feature in order to add or edit Actuals
  • Change Budgets - Supervisor with this feature must also have "View Budgets" feature in order to add or edit Budgets
  • Done Tickets are Read-Only - Employees with this feature cannot make changes to a Work Ticket once the Status has been changed to Done.
  • View Actuals - Supervisor and CSS user with this feature can only view actual records
  • View Budgets - Supervisor with this feature can only view budget records
eHub: Security Groups (2024)

FAQs

At what level do security groups provide? ›

Every Security Group functions similarly to a firewall in that it contains a set of rules that filter traffic entering and exiting the EC2 instances. As previously stated, security groups are associated with EC2 instances and provide protection at the port and protocol access levels.

How do I fix my eHub? ›

To troubleshoot, do the following:
  1. Disable any toolbars installed on your browser.
  2. Turn off any pop-up blockers.
  3. Temporarily turn off any antivirus programs running.
  4. Add your eHub website as a trusted website in your Internet Options settings.
  5. Clear out temporary Internet files.
  6. Make sure the link is valid.

How are security groups evaluated? ›

When evaluating Security Groups, access is permitted if any security group rule permits access. If no Security Group rule permits access, then access is Denied. There is only one Network Access Control List (NACL) on a subnet.

Why is my eHub account locked? ›

As a security measure, if a User ID and/or Password are entered incorrectly five times in a row, you will be locked out of the eHub account. To reset, either have your WinTeam administrator change the password or use the Forgot Password link.

What are the 4 levels of security? ›

A comprehensive security strategy involves understanding and implementing measures at each level to create a holistic defense against a diverse range of potential risks.
  • Level 1: Physical Security. ...
  • Level 2: Network Security. ...
  • Level 3: Application Security. ...
  • Level 4: Data Security. ...
  • Burstiness in Security Measures.
Nov 6, 2023

What is the difference between security group and ACLs? ›

Security groups and network ACLs are similar in that they allow you to control access to AWS resources within your VPC. But security groups allow you to control inbound and outbound traffic at the instance level, while network ACLs offer similar capabilities at the VPC subnet level.

How do I reset my eHub account? ›

If you have forgotten your password to log on to eHub, follow these steps:
  1. Click the Forgot Password link near the bottom of the login screen.
  2. Enter your user ID and click the Continue button.
  3. Enter your date of birth in mm/dd/yyyy format and Social Security Number for identity verification.

How do I change the info on eHub? ›

Overview
  1. From the My eHub header, click the View Profile link to open the My Profile screen.
  2. Click the appropriate Edit icon to display the Change Request window.
  3. Enter the new information and click the Submit button to save the change request.

How does eHub work? ›

eHub seamlessly connects the field to the back office, so you always have access to the latest information. Manage budgets, schedules and time and attendance; create and complete work tickets; and send messages and requests.

What is the security group rule? ›

The rules of a security group control the inbound traffic that's allowed to reach the resources that are associated with the security group. The rules also control the outbound traffic that's allowed to leave them.

How do you check if security group is being used or not? ›

Using the AWS Console:

Choose the EC2 service. From the left-side menu, select Security Groups. See through the Instances column whether the security groups have zero active instances or not. Instances for unused security groups will have a “0” value.

Are security groups allow or deny? ›

Security group rules are implicit deny, which means all traffic is denied unless an inbound or outbound rule explicitly allows it. You can only add or remove "allow" rules—you can't add or remove "deny" rules, and there's no need to.

How many unsuccessful attempts does an user account get locked? ›

Windows security baselines recommend configuring a threshold of 10 invalid sign-in attempts, which prevents accidental account lockouts and reduces the number of Help Desk calls, but doesn't prevent a DoS attack.

What is the User ID for eHub? ›

Enter your Employee Number as the “User ID” and eHub.aus.com as the “eHub Website”. Enter the information requested to validate your personal identification. Create a 4 digit PIN that enables you to login quickly when reopening the app.

At what level do security groups provide protection host, operating system instances, and resources in subnet to virtual private cloud (vpc)? ›

While security groups offer the first layer of defense at the instance level, NACLs provide a secondary layer of protection at the subnet level.

What layer are security groups? ›

AWS Firewall vs. Security Group: An Overview
AspectAWS Firewall (WAF)Security Group
StateStatelessStateful
ScopeEndpoint level (API Gateway, Application Load Balancing, CloudFront, etc.)Instance level (EC2, Elastic Load Balancing, AWS RDS, etc.)
OSI layerLayer 7Layer 3 and 4
2 more rows

At what three level is security? ›

The security features governing the security of an identity can be divided into three levels of security, i.e. Level 1 Security (L1S) (Overt), Level 2 Security (L2S) (Covert) and Level 3 Security (L3S) (Forensic).

What does a security group do? ›

A security group controls the traffic that is allowed to reach and leave the resources that it is associated with. For example, after you associate a security group with an EC2 instance, it controls the inbound and outbound traffic for the instance. When you create a VPC, it comes with a default security group.

Top Articles
Latest Posts
Article information

Author: Nathanael Baumbach

Last Updated:

Views: 5768

Rating: 4.4 / 5 (55 voted)

Reviews: 86% of readers found this page helpful

Author information

Name: Nathanael Baumbach

Birthday: 1998-12-02

Address: Apt. 829 751 Glover View, West Orlando, IN 22436

Phone: +901025288581

Job: Internal IT Coordinator

Hobby: Gunsmithing, Motor sports, Flying, Skiing, Hooping, Lego building, Ice skating

Introduction: My name is Nathanael Baumbach, I am a fantastic, nice, victorious, brave, healthy, cute, glorious person who loves writing and wants to share my knowledge and understanding with you.