001 - Create/Update/Delete user/employee

From Host

This transaction is used for user and/or employee maintenance.

FieldDescriptionData TypeMandatoryComment
1ActionIntegerX

See Note 1

2User IDText(10)

3User profileText

4Logon user IDText(50)

5First nameText(30)(X)

6SurnameText(30)(X)

7Restricted to: Period profile IDText

8Division IDText

9SubstituteText

10Substitute fromDate

11Substitute toDate

12Restricted to: DepartmentsText

Comma separated list of departments that the user has access to

13Restricted to: WorkcentersText

Comma separated list of work centres that the user has access to

14Restricted to: Approval groupsText

Comma separated list of approval groups that the user has access to

15Create missing approval groupLogical

If true the user is assigned to the approval groups specified in field 17

16InactiveLogical

17Approval group ID to setupText

Comma separated list of approval groups that the user can approve. If you want to add also a department for that approval group, you need to add it with :. Example: APPR-GRP1:DEPT1

18Approval levelInteger

1: Approve transactions
2: Approve period totals
3: Approve transactions and period totals
4: Approve projects
5: Approve transactions and projects
6: Approve period totals and projects
7: Approve all

19User rolesText

20Password modeInteger

0: Unified login,
1: Password defined
2: Empty password
3: Hashed password

See Note 2

21PasswordText

Only used when password mode is 1 or 3

22Employee numberText

Mandatory if action >= 2

See Note 5

23Card numberText

24Period profile IDText

25Attendance profile IDText

26Payroll code profile IDText

27Category IDText

28Employee Approval group IDText

29Working placeText

30Department IDText

31Employee group IDText

32Registration methodInteger

See Note 3

33First registration dateDate

34Social security numberText

35EmailText

Update user and/or employee email depending on field 1 ''Action".

36Approval group change dateDate

Use in connection with field #28 to change approval group via the employee's time queue.

37Approval group change timeTime

Use in connection with field #28 to change approval group via the employee's time queue.

38Append approval group restrictionsLogical

If this field contains "true" when a transaction is processed, then any approval group or groups received in field #14 (Restricted to approval groups) will be appended to any approval group restrictions that have already been assigned to the user.

39User's approverText

The approver of the user

40User's managerText

The manager of the user

41Append approval group IDLogical

If this field contains "true" when a transaction is processed, then all approval groups received in field #17 (Approval group ID to Setup) will be appended to any approval group that have already been assigned to the user.

42Substitute user profilesText

A comma separated list of valid user profile

43Restricted to: DivisionsText

Comma separated list of divisions that the user has access to

Notes

IdText
1The following action codes can be used:
* 0: New/changed user
* 1: Delete user
* 4: Delete user/employee
* 5: New/changed user/employee
* 14: Delete employee
* 15: New/changed employee

It's recommended to use action code 5 and 15 instead of action codes 2, 3, 12 and 13. These codes can be used in situations where it is important to have transactions treated as erroneous if the data in ProMark doesn't correspond to the external system's "expectations".

Field 22 must always be used to identify an employee when one of the action codes 2 - 15 is used. When a new employee is to be created, fields 24, 25, 27 and 32 are mandatory. Update requests for an employee record will only involve field 5, 6, 23, 34 and 35 if the employee record has been created or updated by other means than through this host transaction, or if the employee has made a registration. An employee record cannot be deleted by this transaction if the employee has made a registration.
2When a regular user is maintained (Action codes < 12) the following applies:
* In case of unified login (password mode=0) a random password is assigned. If password mode is 1 a password is required. If password mode is 2 no password is assigned and the user will have to enter a password at login. If password mode is 3 a hashed password must be given and it is must be base64 encoded or "hex" coded; the hashing can be done using MD5, SHA-1, SHA-256 or SHA-512. If password mode is 3 and an employee is maintained, the password is assigned to the employee and must be used for logging on the portal. The employee will not be able to use pin code. The password on an employee can be removed by using password mode 2.
* Password mode 0 and 2 can only be used when creating a new user or on existing users that has never logged in. Using password mode 0 or 2 on existing users that have logged in will just be ignored.
* Password mode 0 is the default mode.
When only an employee is maintained (Action codes >= 12) the following applies:
* If password mode is 3 a hashed password must be given and it is must be base64 encoded or "hex" coded; the hashing can be done using MD5, SHA-1, SHA-256 or SHA-512.
* If password mode is 2 any password assignment is removed from the employee who must thereafter use the regular PIN as assigned on the employee master screen or via host transaction type 373.
* Other password modes are not allowed.
31: Clock-in/out or all-day absence required
2: Clock-in/out or all-day absence when relevant
3: Only all-day or hourly absence
4: Present and hourly absence or all-day absence required
5If action is 5 and the employee number is filled out then the user is mapped to the employee. If the employee number is the only employee field (field 22 to 37) that is fill out it is not required that the employee exists.