Our IT Security team is using work assignment information to determine standard security access to other systems (in this case EPIC security profiles). The IT Security department uses this information to grant standard access. However, there is a small subset of exceptions (< 2% of our population) where employees need unique access, not associated with their work assignment/role. There is nothing otherwise different about their work in that area (job description, duties, pay, labor distribution, compliance, etc.). Is anyone using the Infor system to track access exceptions for set up of another system? If not, how are you tracking this, including monitoring and changes. Does HR or IT manage access exceptions, and what system do you use or are you tracking manually?