About
This implementation guide outlines the essential steps for a successful implementation of the Employee Records Management (ERM) solution powered by VisualVault.
Who should use this guide? This guide is intended for implementation teams and project managers involved in configuring and deploying the ERM solution.
Who benefits from following this guide? All VisualVault departments benefit by being able to quickly and efficiently deploy the ERM solution for customers. Technical Support agents may also use this guide to understand the context of how the solution was implemented.
When should this guide be used? Use this guide during the initial setup and configuration phase of the ERM implementation.
When is it most critical to follow the checklist? It is most critical to follow the checklist during the pre-deployment phase, as it ensures all required components are in place and correctly configured before rollout.
Why is this guide necessary? This guide ensures consistency and accuracy throughout the implementation process, reducing the risk of errors and delays, and helping your organization maximize the value of the ERM solution from day one.
Why should departments follow the checklist? Following the checklist ensures that all technical and functional requirements are met, resulting in a seamless ERM solution deployment for clients.
Key Concepts
What is a Database Template?
A database template is a parameterized, customer-neutral configuration baseline of the core product that is safe to reuse as a starting point for another customer. It excludes or anonymizes customer data and contains migration scripts to align with the latest Platform/Feature versions. System Administrators are responsible and accountable for the source database.
Empty State: The database template excludes or anonymizes customer data, providing a blank slate for new projects.
Predefined Schema and Structure: Standard configurations are built in and ready to use.
What is a Clone Database?
A clone database is a complete, exact copy of the database template. It replicates the structure, data, and configurations of the source database. Implementation teams are responsible and accountable for the clone database.
Preserve Predefined Features: Ensure the “out-of-the-box” predefined features of the solution remain unchanged. The clone database should strictly maintain the current product features without modification.
Modify Only Dynamic Features for Client Variables: Limit the changes to dynamic features to only configuring client variables. No other changes should be made to the clone database.
Limit Modifications: Refrain from adding new form templates, workflows, or making any modifications to the clone database. The feature set should remain as originally defined by the vertical market solution scope.
Consult Product Team for Additional Changes: If changes to features beyond the vertical market solution scope are required, immediately consult with the Product team to ensure these requests align with vertical market solution guidelines and standards.
🔍 Troubleshooting Note: If a customer requests features or configurations that fall outside the vertical market solution scope, do not attempt to accommodate the request independently. Escalate to the Product team before making any changes.
Implementation Guide
Getting Started
🔧 Implementor Checklist
Submit Change Control Form (CCF) with a support ticket and request System Administrator clone the database template for ERM.
Verify that the clone database accurately reflects all database template features before beginning configurations.
Document and report any discrepancies to the System Administrator before proceeding.
Predefined Features
Document Library Structure
The ERM solution uses a four-level document library structure:
Level 1: Client - HR
Level 2: Active
Level 3: A
Level 4: Last name, First name, Unique ID
Level 2: Terminated
Level 3: A
Level 4: Last name, First name, Unique ID
🔧 Implementor Checklist
Verify that the folder hierarchy is created as specified above. Deviations from this structure may cause routing and automation failures.
Do not create, modify, or delete folder structure. Report any discrepancies to the System Administrator.
Important Notice: The Document Library structure will be reorganized and improved in ERM v2.1 (scheduled release date April 2026).
Document Index Fields
Four custom Index Fields. Index fields are copied to all subfolders. Default Values are set from the Employee Master iForm data.
Index Field Name: First Name
Required
Type: Text Box
Index Field Name: Last Name
Required
Type: Text Box
Index Field Name: Employee Unique Identifier
Required
Type: Numeric
Index Field Name: Document Type
Required
Type: Drop Down List
🔧 Implementor Checklist
Verify all index fields are present. Verify field names, types, and required settings match the specifications above. Verify index fields are copied to all subfolders.
Do not create, modify, or delete any index fields. Report any discrepancies to the System Administrator.
🔍 Troubleshooting Note: The new index field
Document Type(which specifies W4, Nepotism, Notice, etc) must not conflict with default index fielddocType(which specifies PDF, TXT, etc).
Folder Views
Create Folder View: Implement one (1) folder view for employee documents.
Include Standard Document Index Fields: Ensure the view includes the standard document index fields.
Include Custom Index Fields: Ensure the view includes the four (4) custom index fields.
🔧 Implementor Checklist
Verify the folder view includes all standard document index fields and the four (4) custom index fields.
Do not create, modify, or delete any folder views. Report any discrepancies to the System Administrator.
VisualVault Dashboards
Active Employees Dashboard: Display a list of all active employees.
Create a new Form Data Dashboard: Active Employees Dashboard
Add Columns
[FirstName][LastName][DOB][Department][EmploymentStatus][EmployeeID].Add new filter:
EmploymentStatus: ActiveAdd Element security:
[groupName/userName]set as[viewer/editor/owner].
Terminated Employees Dashboard: Display a list of all terminated employees.
Create a new Form Data Dashboard: Terminated Employees Dashboard
Add Columns
[FirstName][LastName][DOB][Department][EmploymentStatus][EmployeeID].Add new filter:
EmploymentStatus: TerminatedAdd Element security:
[groupName/userName]set as[viewer/editor/owner].
All Employees Dashboard: Display a list of all employees.
Create a new Form Data Dashboard: All Employees Dashboard
Add Columns
[FirstName][LastName][DOB][Department][EmploymentStatus][EmployeeID].Add new filter: N/A
Add Element security:
[groupName/userName]set as[viewer/editor/owner].
🔧 Implementor Checklist
Verify each dashboard filter returns the correct employee set and the element security settings.
Do not create, modify, or delete any form data dashboards. Report any discrepancies to the System Administrator.
🔍 Troubleshooting Note: If a dashboard appears empty, first verify that the
EmploymentStatusfilter value exactly matches the data values in the Employee Master iForm (e.g.,Activevs.active). Filter values are case-sensitive.
Landing Page
The landing page is the first screen that users see when logging in to VisualVault. Use menu items to set the landing page to be the ERM application.
Menu item(s)
Add Menu:
[menuName]Edit Menu Properties
Select Custom URL from the Action dropdown list. Enter the full URL in the text field.
.png?sv=2022-11-02&spr=https&st=2026-04-05T06%3A53%3A01Z&se=2026-04-05T07%3A13%3A01Z&sr=c&sp=r&sig=KEEyEbJbd6hm7rafTnD1TCs8nZZYfPm%2FUZ3TNk4cidk%3D)
Add Element security
[parentName/childName][groupName/userName]set as[viewer/editor/owner]
🔧 Implementor Checklist
Add menu item and configure the URL. Ensure that the full URL is correct.
Enable Append Access Token in menu node properties.
Add element security to the menu item.
Confirm with the customer which user groups require ERM as their landing page.
Employee Search
The Employee Search application feature provides role-based, limited access to employee data through a secure search interface. This eliminates the need for the user to directly access the Document Library. Learn more about the technical architecture and how to configure Employee Search.
🔧 Implementor Checklist
Ensure the
Okta-Workflow List of Managersgroup exists in Okta and contains the appropriate managers.Map this group to the corresponding VisualVault security group to enforce search result scoping.
Audits
Audit processes can be optimized by implementing a single search screen to locate and select employee records efficiently. This application eliminates the need for navigating multiple folders, reduce search times, and ensure accuracy by consolidating data access into a unified interface. Learn more about the technical architecture and how to configure Audits.
🔧 Implementor Checklist
Configure the client and server variables in
/Services/configvariables.jsand/Services/serverstrings.jsDefine custom SQL queries in VisualVault Control Panel under Enterprise Tools → Data Connections
Deploy application code with configured environment variables
Verify application is accessible from the VisualVault landing page
HR Automation, Folder Creation/Updates
The HR Automation feature streamlines the management of employee records by automatically creating and maintaining Document Library folders in response to changes in the Employee Master Form. Learn more about the technical architecture and how to configure HR Automation.
🔧 Implementor Checklist
Verify that security groups created in VisualVault match the Security Matrix.
Verify security groups were populated with appropriate users.
Configure the sFTP server with credentials and remote path matching
App.configFTP settings.
Dynamic Features
Single Sign-On (SSO)
Single Sign-On (SSO) allows users to securely access the system using their existing organizational login credentials, streamlining the authentication process and reducing the need for multiple passwords.
🔧 Implementor Checklist
Gather Client’s IdP Information: Request the client’s Identity Provider (IdP) metadata (XML file or metadata URL) and confirm their IdP platform (e.g., Azure AD, Okta, Google Workspace).
Provide Your SAML Details: Share your service provider’s (SP) metadata, including the Assertion Consumer Service (ACS) URL and Entity ID.
Coordinate Attribute Mapping: Work with the client to ensure required attributes (e.g.,
email,firstName,lastName,userName,groupName,[viewer/editor/owner]) are included in the SAML assertion.Configure SSO on VisualVault’s End: Input the client’s IdP metadata into your SSO configuration settings and map the appropriate attributes.
Test the Connection: Conduct end-to-end testing with the client to ensure users can authenticate successfully and land in the correct user role or group.
Validate Roles and Permissions: Confirm that SSO users are correctly provisioned and authorized based on their assigned roles.
At Go Live: Enable SSO for the client’s production users and provide onboarding or help documentation if needed.
Employee Master iForm
The Employee Master iForm is built from a standardized VV form template used for onboarding. When creating a customer-specific version, begin with the base template and add only the necessary custom fields. All custom fields must follow the established naming conventions and be renamed appropriately within the source database. Do not modify or remove any of the predefined fields included in the template, as they are essential to existing workflows and scheduled task automations. Several predefined fields may be hidden, but must remain intact to ensure proper functionality.
Form Details (maximum of 20 fields)
Form Template Employee Master Form
Modify Form Name from
[oldValue]to Employee Master Form.Add
[dropdownControlName]form controlCheck Enable Query.
Set the query to
[queryName].Change the control size from
[oldValue]to[newValue].Set the Data Lookup Property to Value Property.
Font
Update font sizes of labels and fields.
Font: set to Source Sans Pro.
Font size: set to 11.
Groups And Conditions
Update
[groupName].Update
[visibility/read only]conditions:[fieldName][is equal to/is not equal to/etc]'[value]'.
Client-Side Scripts
[Commit ID 1]:[Commit Description][Commit ID 2]:[Commit Description]
🔧 Implementor Checklist
Start from the base Employee Master Form template. Do not use a custom or modified template.
Add required custom fields only. Confirm total field count does not exceed 20, including hidden predefined fields. Follow established naming conventions for all custom fields.
Configure dropdown control: enable query, set query name, adjust control size, and set Data Lookup Property to Value Property.
Update font to
Source Sans Pro, size11for all labels and fields.Update group names and visibility/read only conditions.
Apply client-side scripts. Document commit IDs and descriptions.
Confirm all predefined fields are intact, including hidden fields.
Important Notice: The Employee Master iForm will be replaced with a database table in ERM v2.1 (scheduled release date April 2026).
User Groups and Permissions
Predefined User Groups: The source database defines User Groups with specific permissions, ensuring that the new database inherits the correct access controls.
Implementation teams should ensure that Users are added to the appropriate User Group.
Permissions/Security: The source database sets up access controls, including which User Groups have the ability to perform certain operations, to maintain consistent security within a clone database.
Area / Function | Survey Leader | Survey Coordinator | Compliance Team | Auditor |
|---|---|---|---|---|
View Survey List Dashboard | ✅ Editor | 🚫 No Access | 🔍 Viewer | 🚫 No Access |
Create a new survey | ✅ Editor | 🚫 No Access | 🚫 No Access | 🚫 No Access |
Details Tab | ✅ Editor | 🚫 No Access | 🔍 Viewer | 🚫 No Access |
Employees Tab | ✅ Editor | 🚫 No Access | 🚫 No Access | 🚫 No Access |
Coordinator Screen | ✅ Editor | ✅ Editor | 🚫 No Access | 🚫 No Access |
Documents Tab | ✅ Editor | 🚫 No Access | ✅ Editor | 🚫 No Access |
Document Viewer | ✅ Editor | 🚫 No Access | ✅ Editor | 🚫 No Access |
🔧 Implementor Checklist:
Review predefined User Groups — confirm all groups have been inherited correctly from the source database
Assign all users to the appropriate User Group — audit assignments with the client before go-live
Verify permissions and security settings are consistent with the source database
FAQ
“Why can’t I see any content?”
Common cause: The user set up with SSO may not have been assigned a Group.
Investigate:
Check that requester is a VaultAccess user, in order to comply with Security procedures.
Go to Central Admin > Users
Check Account Status: All Accounts
Search by the User ID
Fix: Enable user from Group Administration. (Note: if a user is disabled, then the client can not fix it themselves.)
Check User ID Never Expires
Check Password Never Expires
Known quirk: If the Password Expiration date is a past date then it will not allow login. First set this to year 9999 before you check box.
“Why can’t I find XYZ employee?”
Common cause: Using Employee Search, If a user enters their email address, then the result will display the employees who directly report to them in their organization. The user may need to have additional employee reports assigned to them in order to view the individual employee reports they are seeking.
Investigate:
Review the employee reports listed in the Employee Master Form and compare them with the number of result items to verify how many employees should be visible to this user.
VV personnel cannot grant access for users to view additional employee reports. If a request for such access is received, it should be redirected to the client’s internal ticketing system and approval process.
Fix: Redirect the user to the client’s internal ticketing system and approval process. Any escalation should be directed to the client’s VaultAdmin, who may approve the request and set the appropriate security permissions.
Users with VaultAdmin access within the organization can approve the necessary permissions and complete a Department Override Form to grant the required access to the user.

.png?sv=2022-11-02&spr=https&st=2026-04-05T06%3A53%3A01Z&se=2026-04-05T07%3A13%3A01Z&sr=c&sp=r&sig=KEEyEbJbd6hm7rafTnD1TCs8nZZYfPm%2FUZ3TNk4cidk%3D)