A Manager receives permission error on creating a new Employee: "VI.Base.ViException: Employees: Viewing permission denied for value "Entry date" (4320545)

If a Manager (Application Role Base roles\Employee Managers) tries to create a new Employee, they receive the following permission error:

"VI.Base.ViException: Employees: Viewing permission denied for value "Entry date"

There is no issue if the Manager has the Application Role Identity Management\Employees\Administrators. But this role allows for too many permissions for a standard manager. 

What application role would work in this case?

The Manager (Base Roles\Employee Managers) doesn't have sufficient permissions for this action.

If the application role Identity Management\Employees\Administrators (permissions group vi_4_PERSONADMIN) has too many permissions, a custom application role can be created (and a permission group).  Assign rights for Person.EntryDate to the new role/permission group. The manager has to be assigned this custom role.

1. Create the new permissions group: Creating permissions groups.

2. Edit the permissions on the Person table to allow the new permissions group to edit the EntryDate column: Editing table permissions and column permissions.

3. Create the custom application role and assign the new permissions group: Creating and editing application roles.  E.g.:

4. Assign the application role to the Manager's Employee object: Assigning application roles to employees, e.g: