Granular roles and entities

Module-level granular roles have been added to facilitate defining and configuring the responsibility framework. These roles enable tasks to be performed without creating custom access control lists (ACLs) on the target table when a responsibility ACL exists. This update aims to provide a more direct and declarative migration process.

Table 1. Granular roles and related entitiesThe granular role provides Create, Read, and Update (CRU) access across entities, based on the access permissions defined for each responsibility.

Granular roles	Description
Recall Claim Management Creator [sn_rcl_claim_mgmt.campaign.creator]	View, write, and create Recall Campaign tables.
Recall Claim Management Viewer [sn_rcl_claim_mgmt.campaign.viewer]	View all Recall Campaign tables.
Recall Claim Management Writer [sn_rcl_claim_mgmt.campaign.writer]	View and write all Recall Campaign tables.
Campaign Phase Writer [feature role] [sn_rcl_claim_mgmt.campaign_phase.writer]	Read access on all Recall Campaign related tables. It has write access on Recall Campaign Phase, Impacted Finished Good & Phase Task tables. It has create access on Phase Task and Impacted Finished.
Pre-authorization admin [sn_repair_claim_mgmt.repair_pre_auth_admin]	Create, update, and delete the pre-authorization request.
Repair Claim Management Viewer [sn_repair_claim_mgmt.repair_pre_auth_viewer]	View all Repair Claim Pre-authorization tables.
Pre-authorization navigator [sn_repr_claim_mgmt.pre_auth_navigation_menu]	Access to related list menu for pre-authorization in workspace.
Warranty specialist [sn_claim_cmn.warranty_specialist]	View and update pre-authorization request. Also, can view Repair claim. This role is for user who can approve/reject/send-back pre-authorization request.

Table 2. Granular roles and supported entitiesGranular roles are designed based on feature sets and can be used to provide access to supported tables or entities though the responsibility framework.

Feature set	Granular roles	Supported entities
Recall campaign	sn_rcl_claim_mgmt.campaign.creator sn_rcl_claim_mgmt.campaign.viewer sn_rcl_claim_mgmt.campaign.writer sn_rcl_claim_mgmt.campaign_phase.writer	sn_rcl_claim_mgmt_ca Corrective action charges sn_rcl_claim_mgmt_ca_charges sn_rcl_claim_mgmt_rcp sn_rcl_claim_mgmt_phase_task sn_rcl_claim_mgmt_rcp_phase
Recall campaign phase	sn_rcl_claim_mgmt.campaign_phase.writer sn_rcl_claim_mgmt.campaign.viewer	sn_rcl_claim_mgmt_rcp_phase sn_rcl_claim_mgmt_phase_task

System roles containing granular responsibility roles

Table 3. System roles and related granular roles

System roles	Granular roles
Recall Manager [sn_rcal_claim_mgmt.recall_manager]	sn_rcl_claim_mgmt.campaign.creator sn_rcl_claim_mgmt.campaign.viewer sn_rcl_claim_mgmt.campaign.writer sn_rcl_claim_mgmt.campaign_phase.writer
Recall Phase Owner [sn_rcl_claim_mgmt.recall_phase_owner]	sn_rcl_claim_mgmt.campaign_phase.writer sn_rcl_claim_mgmt.campaign.viewer
Warranty Specialist [sn_claim_cmn.warranty_specialist]	financial_mgmt_user sn_customerservice_agent sn_dealer_mgmt.dealer_viewer sn_mfg_cmn.navigation_menu sn_prd_pm.product_catalog_viewer sn_prm.enterprise_partner_agent sn_repr_claim_mgmt.claim_viewer sn_repr_claim_mgmt.navigation_menu sn_repr_claim_mgmt.pre_auth_navigation_menu sn_repr_claim_mgmt.repair_pre_auth_charge_creator sn_repr_claim_mgmt.repair_pre_auth_writer