Required access to Compliance Event Manager datasets for users.

Products

• Compliance Event Manager

Issue/Introduction

Is UPDATE access required for the CEM (Compliance Event Manager) datasets for users that create, delete and update policy events, and policy sets, in Compliance Manager

Resolution

Compliance Event Manager administrators that create, delete and update policy events and policy sets for the Compliance Manager datasets do not need UPDATE access to the various Compliance Event Manager datasets.

The Compliance Event Manager started tasks and components which access those datasets should be given UPDATE access.
It is those started tasks that are updating and reading the datasets on the users'/admin's behalf. 

The Compliance Event Manager configuration jobs J00170SA and J00185SA which reside in the in CUSTOM.JOBLIB include commands to define the resources to the external security manager (ESM) and create roles and permits. You can reference these security jobs when giving a user permission to perform product functions.