Description

Administrators unable to remove or add roles in scoped applications access

For instance, administrators are unable to add or remove role 'sn_hr_sp.hrsp_employee' in a scoped application.

Steps to Reproduce Using 'sn_hr_sp.hrsp_employee'

1. Install the Plugin "Service Portal for HR - Service Creator categories"
2. Locate the role "sn_hr_sp.hrsp_employee".
3. Try to add or remove this role 'sn_hr_sp.hrsp_employee' impersonating a user with administrative access.
4. You will not able to add or remove this role even with administrative access.

Solution

Verify the value for 'Assignable by' and grant that role to the user to be able to add or remove roles

The following is a resolution, taking 'sn_hr_sp.hrsp_employee' as an example:

           1.In the table 'sys_user_role' check that the role 'sn_hr_sp.hrsp_employee' belongs to the scoped application.

           2.Here the role 'sn_hr_sp.hrsp_employee' belongs to the scoped Application "Human Resources: Service Portal" as shown below:

           3. ‘Assignable by’ is 'sn_hr_core.profile_writer' and hence the user must contain this role to add or remove the 'sn_hr_sp.hrsp_employee'.

           4. After granting this role, the user will be able to add or remove the role 'sn_hr_sp.hrsp_employee'

Additional Information

Scoped application roles have the field ‘Assignable by'. ‘Assignable by’ specifies the role that the user must have to be able to add or remove scoped application roles.