To update user access controls within the SayPro system for new hires or changes in staff roles, follow this step-by-step process. This will ensure that user accounts are properly created or updated, and permissions are aligned with each individual’s responsibilities while maintaining system security and data integrity.

---

1. Create or Update User Accounts for New Hires or Role Changes

For New Hires:

1. Collect Required Information:
   • Name, email address, and department.
   • Role or job title.
   • Access needs (i.e., what data or modules they need to access based on their role).
   • Start date and supervisor’s name.
2. Create User Accounts:
   • Log into the SayPro system‘s admin panel.
   • Navigate to the User Management or Account Settings section.
   • Create a new user account, entering all relevant details (e.g., username, email, password).
   • Assign a default role based on the new hire’s position (e.g., Project Manager, Data Entry User, System Administrator).
3. Assign Appropriate Permissions:
   • Role-Based Permissions: Assign access based on the employee’s role. For example:
     • System Administrator: Full access to system configurations, user management, and settings.
     • Project Manager: Access to specific project-related data, such as SayPro Monthly January SCLMR-1, and reporting tools.
     • Data Entry User: Access to input or update data but no ability to modify system configurations or access sensitive information.
     • Viewer: Read-only access to specific dashboards or reports, with no data manipulation rights.
   • Data and Module Access: Assign permissions to specific data sets or system modules required for the new hire’s role (e.g., access to project management or monitoring tools).
4. Set Up Multi-Factor Authentication (MFA):
   • If security policies require, enable multi-factor authentication (MFA) for the new account to enhance data protection.
5. Notify the New Hire:
   • Send an onboarding email with instructions on how to log into the system.
   • Include details such as initial login credentials, system guidelines, and MFA setup instructions (if applicable).

For Changes in Staff Roles:

1. Review the Employee’s Current Role and Permissions:
   • Identify which roles and permissions the employee currently has by reviewing their existing account in the SayPro system.
   • Understand their new role responsibilities to ensure the correct access is granted.
2. Update User Role:
   • If the employee is changing roles (e.g., from Data Entry User to Project Manager), update their account to reflect the new role.
   • In the admin panel, navigate to the User Management section, locate the employee’s account, and change their assigned role.
   • Modify their permissions as necessary to ensure they have appropriate access aligned with their new responsibilities. For example:
     • Increased access: A project manager may need broader access to data sets or project reports.
     • Decreased access: A user moving to a less sensitive role should have their permissions reduced accordingly.
3. Adjust Specific Data Access:
   • Review the employee’s access to specific data, especially sensitive information. For example, if their role change requires access to SayPro Monthly January SCLMR-1 data, grant or revoke permissions based on the new role.
   • Make sure their read/write permissions reflect the new role’s needs.
4. Revoke Access to Unneeded Data:
   • If the employee’s role change means they no longer need access to certain modules or data sets, ensure those permissions are revoked immediately to maintain data security.
5. Set Up or Modify Multi-Factor Authentication (MFA):
   • If MFA was not previously set up, enable it for the account.
   • If MFA was already enabled, review and verify that it’s working correctly.
6. Notify the Employee:
   • Send an email or internal message informing the employee of the role change and any modifications to their system access.
   • Include any necessary instructions on new data sets or modules they now have access to, or actions they may need to take (e.g., update passwords, set up MFA).

---

2. Regularly Review and Maintain Access Controls

Once the new hires or role changes are implemented, it’s important to set up a regular review cycle to maintain access control integrity:

• Regular Permission Audits: Perform periodic audits (quarterly, bi-annually) to ensure that all user permissions remain appropriate for their roles. Revoke access for users who no longer require it (e.g., employees who have left or been reassigned).
• Automated Alerts: Set up automated alerts for any changes in access levels or when sensitive data is accessed. This helps to monitor the system for any unauthorized access attempts.
• Training and Guidelines: Ensure that all new hires and employees with updated roles receive proper training on system use, security policies, and data handling procedures to minimize human errors and potential security breaches.

---

3. Action Plan for Updating User Access:

1. New Hires:
   • Collect all relevant details for new hires.
   • Create user accounts and assign appropriate roles.
   • Assign access based on their job responsibilities.
   • Enable MFA, if applicable.
   • Notify new hires with login details and instructions.
2. Role Changes:
   • Review current permissions and role changes.
   • Update the system with the new role and modify permissions.
   • Revoke access to unneeded data and modules.
   • Ensure MFA is set up and functioning.
   • Notify the employee of the role change and updated access.
3. Review and Maintain:
   • Regularly review user access permissions.
   • Set up alerts for unusual access activity.
   • Train staff and establish security protocols.

By following these steps, the SayPro system will ensure that user access controls are updated efficiently for new hires and role changes, enhancing both security and data management.