Company Number and Employee ID must be assigned on the ESS Agent for each user. Use loadusers or Mass Assignment to make assignments. A Portal Administrator can create the ESS Portal Role to limit access in the Portal and to lock access to the Employee Self Service Bookmark. Assign the Portal Role to the User Record. A Portal Administrator should lock access to all Child bookmarks not used by the organization.