Overview

This article explains the expected system behavior regarding visibility of candidate and employee profiles, especially when accessed via direct links. It also outlines the role-based permissions that control access and how access can be restricted through configuration.

Expected behavior

When a user (For example, Employee or Hiring Manager) attempts to access a profile, access is determined by:

1. Employee Profiles (Internal Candidates)
   
   • Access is always allowed to other employees.
2. Candidate Profiles (External Candidates)
   
   • Access is granted only if:
     • An interview has been scheduled, or
     • A feedback request has been sent to the user

   In all other cases, access is denied unless the user has specific Recruiting Permissions.

This behavior applies even when profiles are accessed via direct URLs.

Behavior for other roles

Users with roles other than the employee role may still be able to access candidate profiles directly if they hold certain permissions.

Common permissions included in the Hiring Manager role (Example)

• perm_view_my_pipelines
• perm_manage_my_pipelines

These permissions fall under the broader category of recruiting permissions, which allow profile access regardless of interview/feedback status.

List of recruiting permissions

Access to candidate profiles is permitted if the user’s role includes any of the following permissions:

• PERM_MANAGE_USERS
• PERM_LOGIN_AS_USERS
• PERM_MANAGE_COMPANY_INFO
• PERM_MANAGE_SHARED_EMAIL_TEMPLATES
• PERM_MANAGE_INTEGRATION
• PERM_MANAGE_DIVERSITY
• PERM_MANAGE_REFERRALS
• PERM_MANAGE_CAREER_SITE
• PERM_MANAGE_TALENT_REPORTS
• PERM_MANAGE_ALL_CAMPAIGNS
• PERM_VIEW_ALL_CAMPAIGNS
• PERM_CREATE_CAMPAIGN
• PERM_SEARCH_TALENT_POOL
• PERM_VIEW_EMP_INTERVIEW_NOTES
• PERM_VIEW_MASKED_PROFILES_ONLY
• PERM_ADVANCE_ATS
• PERM_ADVANCE_REJECT_ATS
• PERM_REJECT_ATS
• PERM_ADD_TO_ATS
• PERM_CALIBRATE_MY_POSITIONS
• PERM_CALIBRATE_ALL_POSITIONS
• PERM_MANAGE_POSITION_WORKFLOW
• PERM_VIEW_POSITIONS_DASHBOARD
• PERM_VIEW_MY_PIPELINES
• PERM_VIEW_ALL_PIPELINES
• PERM_MANAGE_MY_PIPELINES
• PERM_MANAGE_ALL_PIPELINES
• PERM_PUBLISH_MY_POSITIONS
• PERM_PUBLISH_ALL_POSITIONS
• PERM_DIVERSITY_EXPORT_RAW_DATA
• PERM_IMPORT_RESUMES
• PERM_CREATE_POSITION
• PERM_VIEW_ADMIN_CONSOLE
• PERM_MANAGE_EVENTS
• PERM_MANAGE_MY_EVENTS
• PERM_VIEW_ALL_EVENTS
• PERM_VIEW_MY_EVENTS
• PERM_VIEW_ALL_COMMUNITY
• PERM_VIEW_MY_COMMUNITY
• PERM_MANAGE_MY_COMMUNITY
• PERM_MANAGE_ALL_COMMUNITY
• PERM_CREATE_COMMUNITY
• PERM_CALIBRATE_MY_COMMUNITY
• PERM_CALIBRATE_ALL_COMMUNITY
• PERM_VIEW_ALL_ROLES

If a user has any of these permissions, they will be able to access candidate profiles directly.