Regarding the Employee Self Service users, these are very limited logins that allow an employee to do things like enter time sheets, enter expenses, schedule and task management and set reminders. They cannot view or generate transactions, create records etc.