Users with access to employee management have access to all employee information, even those that the user may have no responsibility for. This makes confidential employee information available to those who do not need it.

In our organization, it is critical that this type of information availability be limited. We could do so either by way of either building restrictions or PO/Requisition Groups.