Why the sn_hr_core_manager role contains the catalog_admin role?

[ElissaK]

Hi,

The sn_hr_core_manager role contains catalog_admin role but catalog admin role allows full access to all catalogs and catalog items. HR users who require the role sn_hr_core_manager should only have access to the HR catalogs. I don't see the reason why this role would be included to the HR module roles because it is creating a risk to the other catalogs. Is there a way to change this? 

[Ravi Chandra_K · Accepted solution]

Hello @ElissaK 

Go to the Contained Role in sn_hr_core_manager record itself (you can go from related list of the parent role).

Make sure you are in the correct scope when you are removing the contains role 

Please mark the answer as helpful and correct if helped 

Kind Regards,

Ravi Chandra