-
Titolo
A Manager receives permission error on creating a new Employee: "VI.Base.ViException: Employees: Viewing permission denied for value "Entry date" -
Descrizione
If a Manager (Application Role Base roles\Employee Managers) tries to create a new Employee, they receive the following permission error:
"VI.Base.ViException: Employees: Viewing permission denied for value "Entry date"
There is no issue if the Manager has the Application Role Identity Management\Employees\Administrators. But this role allows for too many permissions for a standard manager.
What application role would work in this case? -
Causa
The Manager (Base Roles\Employee Managers) doesn't have sufficient permissions for this action.
-
Risoluzione
If the application role Identity Management\Employees\Administrators (permissions group vi_4_PERSONADMIN) has too many permissions, a custom application role can be created (and a permission group). Assign rights for Person.EntryDate to the new role/permission group. The manager has to be assigned this custom role.
1. Create the new permissions group: Creating permissions groups.
2. Edit the permissions on the Person table to allow the new permissions group to edit the EntryDate column: Editing table permissions and column permissions.
3. Create the custom application role and assign the new permissions group: Creating and editing application roles. E.g.:
4. Assign the application role to the Manager's Employee object: Assigning application roles to employees, e.g: