One of the most common questions I see come up is how to set up Lawson so that when someone logs in, they can't see certain employees. For example, say that HR, you want your front receptionist to be able to look up pay rates to verify salary and employment but you don't want them to see the pay rates for executive staff. Well, here's a step-by-step on how to set that up.

Note: There are instructions on the Lawson support web site and in the HR manual, but neither one really gives you all the information to set it up correctly.

Step 1: Setting Employee Level Security Access Codes

If you pull up HR12: Employee Security, and you hit inquire, you should see a listing of all your employees and their current security level and security location. If you want to restrict access to someone, this is the first thing you need to change. The lower the security level, the more restricted the access. By default, Lawson gives everyone a level of 9, which means anyone can access the employee's record. In this example, I want to set the CEO at level 1, the VPs at level 2, the directors at level 3, etc.

So on HR12, find the CEO and change his security level to level 1. Do the same for the directors but set them to level 2. And so on.

Step 2: Setting LAUA security groups with their level of clearance.

Now that you have assigned each individual employee a security level, now you need to define what level each of the Lawson users have clearance to view.

1) Open LAUA
2) F6 --> (A) Security Class
3) Select a Security Class
4) Select your product line
5) F6 --> (A) Applications
6) With the cursor on the Data Area/ID field, press F6
7) Choose (D) Record Level Security
8) Enter 3 for the security level, and 99999999 for the security location
9) Press the Enter key

You have now set up the security clearance for everyone in this security class.

Step 3: Test Security

Now that everything is set up, log in as someone in that security class that we just configured. Go to HR11 and search for an employee. Since we set the security level to 3, we should only be able to see directors and below in our list. The CEO and VPs should not appear to be selectable on the HR11 employee search.

You have now successfully restricted access to employee records.