Is UPDATE access required for the CA Compliance Event Manager datasets for users that create, delete and update policy events and
policy sets in Compliance Manager?
CA Compliance Event Manager administrator that create, delete and update policy events and policy sets for the Compliance Manager datasets do not need UPDATE access to the various Compliance Event Manager datasets.
The CA Compliance Event Manager started tasks and components which access those datasets should be given UPDATE access. It is those started tasks that are updating and reading the datasets on the users'/admin's behalf.
The CA Compliance Event Manager configuration jobs J00170SA and J00185SA which reside in the in CUSTOM.JOBLIB include commands to define the resources to the external security manager (ESM) and create roles and permits. You can reference these security jobs when giving a user permission to perform product functions.