For years, we have had clients ask if we can lock down the employee setup screen to only allow changes to the identifier section - employee login/password. They want restrict logins access to anything except those fields.
This could be another "check boxe" on the supervisor login setup. The box may be something like:
"Changes are restricted to login and ESS password data only"
This is a compliance concern, especially since there is no audit trail on changes made to the upper part of the employee record.