When the GRC: Profile plugin is activated, an "Action not authorized" error is displayed on ast_contract when submitting a new contract record for review.

1. Navigate to Contract > Contracts > All.
2. Click New.
3. Fill in the mandatory fields.
4. Click Submit For Review.
   The record is created as expected. 
5. Navigate to System Definitions > Plugins.
6. Search for and open the record for GRC: Profile.
   The GRC: Profile plugin requires activation of the Policy and Compliance Management plugin, the Risk Management plugin, or the Audit Management plugin. For more information, see GRC profile scoping in the product documentation. 
7. In Related Links, click Activate/Upgrade.
8. Click Activate.
9. When the process is complete, click View Plugin List.
10. Navigate to Contract > Contracts > All.
11. Click New.
12. Fill in the mandatory fields.
13. Click Submit For Review.
    Note that the error message Action not authorized is displayed.

Change the name of the UI Action to a unique name. 

 

For more information please see the following link:

https://community.servicenow.com/thread/209060

GRC: Risk Management plugin creates a new UI Action with the same Action name (submit_for_review) but UI Actions on an instance should be unique.