CoE Security Delegation to HR Admin

[David Aldridge]

I have a situation where our client wants CoE Security Configuration delegated to their HR Admin (without the system admin role), however the client doesn't have the Employee Relations application installed. For some reason accessing CoE Security configuration requires either system admin or employee relations admin (admin, sn_hr_er.admin). 

Does anyone know why this is set up this way, and is there a solution that doesn't involve messing with the OOTB ACLs or installing ER?

Thanks.

[Mark Manders]

Yes, there is a solution but not if you don't want to change the OOB ACLs. That's how it works. By default everything is set according to OOB ACLs and if you want to enhance or limit on top of that, you need to adjust the OOB ACLs.

There is no in between here.