Organization Engine

Centering on people to consolidate organizational master data: department hierarchy, position assignments, and reporting relationships — the only trusted source for permission trimming and process personnel selection.

Engine Positioning

The organizational engine is the foundation of people and organizations on the platform. First, clarify departments, personnel, positions, and reporting relationships, so that permissions can be trimmed according to 'this department / this department and sub-departments,' workflows can determine handlers based on superiors or department heads, and the form's user selection components can consume unified master data. What it solves is not 'drawing an organizational chart,' but ensuring that when employees join, transfer, change positions, have acting roles, or operate in multiple organizations simultaneously, business systems no longer maintain separate conflicting contact lists.

In scenarios where multiple business units of a group, SaaS multi-tenancy, and internal and external collaboration coexist, organizational data is isolated by tenant, and internal employees and external contacts are managed in separate directories. The organizational personnel in EHR, the multi-subsidiary procurement control in SRM, and the person's selection rules in various business approvals should all reuse the same set of positions and reporting relationships, and switch permissions and approvers based on the effective date to avoid situations where 'the person has moved to a new department, but the system still finds the old manager.'

Where It Fits

  • The group has multiple business divisions and subsidiaries operating in parallel, the department hierarchy and job definitions are not unified, and the report dimensions do not align.
  • One person holds multiple positions in different departments, with the coexistence of primary posts and part-time roles. Each business system maintains its own organization, and after a transfer, permissions and approvals drift for a long time.
  • Approvals must circulate according to superiors or department heads, but organizational relationships are scattered in IM and spreadsheets, and proxies have no time limit.
  • Internal and external collaboration (suppliers, customer contacts) needs to distinguish identity and data scope from internal employees
  • In SaaS/multi-tenant deployments, organizational data must be isolated by tenant and can be initialized upon account creation

Capability Highlights

  • Department tree and org viewsTree-structured maintenance of departments, responsible persons, and levels, supporting architecture views and batch import/export. When multiple business units/multiple factories operate in parallel, organizational standards become the common dimension for permissions, processes, and reports, rather than each system drawing a separate diagram.
  • Staff assignmentsUsers can be associated with multiple departments, positions, and job types, distinguishing between primary departments and part-time roles; changes in appointments come with an effective date. During onboarding, transfers, or departures, permission packages and approvers switch at clearly defined times, avoiding the situation where 'the person has moved to a new department, but the system still refers to the old manager'.
  • Reporting linesMaintain superiors and department heads to ensure stable parsing of rules such as 'superior' and 'department head' in the process. Deputies and authorizations should have a set duration to prevent long-term distortion of reporting relationships, which could result in approvals falling to the wrong responsible person.
  • Post and job-type catalogJob codes and job types are managed uniformly, supporting personnel selection components, staffing statistics, and job-level permission package configuration, reducing authorization confusion caused by 'same name, different positions'.
  • Internal and external identitiesInternal employees and external organizations/contacts are managed in separate volumes, with data scope and login capabilities separated. Scenarios such as supplier portals and customer collaboration can reuse the identity model without polluting the internal address book.
  • Multi-tenant isolationOrganize data by tenant isolation, and the organizational framework can be initialized after account opening. When multiple organizations of a group run in parallel with SaaS, the organizational boundary is the security boundary, and cross-tenant personnel sharing is prohibited.

Works With Other Engines

Permission Engine

The data scope is trimmed according to the organizational boundaries of this department/this department and its subordinates; after the effective date of the appointment, the visible rows converge with the permission package. Concurrent positions, secondments, and acting roles must have a term, otherwise permission debt will inevitably accumulate.

Workflow Engine

Approvers are resolved according to supervisors, department heads, departments, and roles; after organizational adjustments, the handler rules can still be used, without needing to change each person's settings for every process, reducing maintenance costs.

Form Engine

The personnel/department/position/role selection component only consumes the organization's master data, avoiding conflicts between independently built address books in various business units, and ensuring that the selection results are consistent with the appointments.

Report Engine

The operations and human resources dashboard can be filtered by department/organization dimension, with the scope consistent with the organizational tree, supporting multi-factory comparisons without dimension mixing and with interpretable aggregation.

Typical breakpoints

BreakpointCommon causeControl lever
After the job transfer, approval still goes to the old managerThe effective date of the position is not bound, or the process is hard-coded to an individualEffective date of appointment + Handler analyzes according to the rules
Holding multiple positions leads to seeing things one shouldn't seeNo data range or indefinite period for concurrent postExplicitly model concurrent positions and set an end date
The dimensions of the reporting department do not alignDepartment codes built by each systemUnified Department Tree and Import-Export Governance
Supplier contacts added to internal address bookInternal and external identities not separatedExternal Organization/Contact Master Data
Personnel transferring between subsidiary company databasesTenant isolation or organizational boundary misconfigurationAccount Opening Initialization Skeleton + Random Inspection Isolation
After opening the account, there is only the department with no one.Disconnection between framework and personnel introductionPhased Implementation + Random Inspection List for Positions
Agent still appears in to-do after expirationAgent not bound end date or not retrievedAgent Ledger + Process Analysis Regression

Promotion and Acceptance

  • First freeze the department codes and hierarchy rules, then batch import personnel; prohibit "changing codes while going live" to prevent historical document dimension drift
  • Integration of transfer and job change processes with organizational appointment: randomly check the permission packages, pending handlers, and form selection results before and after the effective date
  • Agents and secondments must be retrievable with a demonstrable end date; check whether expired agents still appear in the process parsing results
  • When sharing the organization with multiple products such as EHR and SRM, agree on a single maintenance entry and synchronization direction to avoid mutual overwriting of master data.
  • Randomly check whether the department dimension fields of the same personnel in the already launched modules such as QMS/SRM/WMS come from the same organizational tree
  • Multi-tenant account opening demonstration: Retrieval of personnel and departments across tenants should be isolated, and audits should be able to illustrate tenant boundary configuration.
  • External contacts must not appear in the selection results for internal salaries, costs, or unauthorized projects

Implement in stages

  • Phase 1 (Framework): Tenant boundaries, department tree codes, job directory, internal and external volume strategies; complete import templates and sampling test cases
  • Second term (in office): Personnel appointment, primary and concurrent positions, reporting relationships, onboarding, transfers, and departure linkage; coordination with permission packages and process analysis
  • Phase Three (Collaboration): Align with external identities in EHR/SRM/CRM; include secondments and project-based organizations (if any) in the ledger

Create a landing prompt

When multiple factories operate in parallel, a common practice is to use the organizational tree to distinguish factories and workshops, with the job directory having unified codes but positions being assigned according to the factory; WMS warehouse organization, MES workshop organization, and EHR payroll organization should be mapped to nodes of the same tree, rather than having three parallel sets of codes. For project-based manufacturing, if project teams are enabled, it is recommended to authorize project teams with a time limit and attach them to main positions to avoid 'still seeing project costs long after the project ends.' After going live, organizational changes should go through work orders or HR processes to leave a record, and directly changing codes in the backend without notifying downstream reconciliation is prohibited.

When not to apply

  • It is hoped that the organizational engine will replace professional HR salary formulas or attendance device agreements—it provides master data for positions, but does not replace the attendance machine or the salary calculation rules themselves.
  • No effective date for discipline, organizational adjustments rely entirely on post-event permission changes — rules for the appointment ledger should be established before discussing automation
  • The requirement for cross-tenant shared personnel allocation—contradicts the SaaS multi-tenant isolation design and should be addressed through group-type deployment and organizational boundary modeling.
  • Treat the organizational chart as for display only, not allowing downstream consumption—if permissions and processes still maintain the address book separately, the underlying platform's value cannot be realized

Product Fit

FAQ

Common questions on org master data and effective-date transfers; contact us if you still need help

Why does approval still go to the old manager after a transfer?

Usually the assignment has no effective date, or the flow hard-codes a person. The org engine should switch assignment, permission pack, and handler resolution on the same day. Spot-check one to-do before and after the transfer.

Can a concurrent post see rows it should not?

Yes, if the concurrent post has no data scope or no end date. Concurrent posts, secondments, and proxies must be modeled with a term and reclaimed at expiry, or permission debt accumulates.

Can the org engine replace EHR payroll and time clocks?

No. It supplies department, assignment, and reporting-line master data for permission and flow. Pay formulas and clock protocols stay with EHR or shop-floor devices.

Will supplier contacts enter the internal directory?

They should not. Internal staff and external contacts are kept in separate books. External identities must not appear in internal payroll, cost, or unauthorized project people-pickers.

How should a multi-plant organization hang together?

Use one org tree for plants and shops. Job codes are shared; assignments hang on the plant. WMS warehouses, MES shops, and EHR pay orgs should map to this tree—not three parallel code systems.