Workflow Script cannot create a record into the sys_user_grmember table for the groups containing HR roles - Support and Troubleshooting

Workflow Script cannot create a record into the sys_user_grmember table for the groups containing HR roles Issue On the workflow, there is a certain Run Script that adds users to the group.

When trying to add the User to a Group containing the sn_hr_core.basic role, the Run Script cannot create/delete an entry.

The RITM closes but the user is not added/removed. This is true for all the sn_hr_core roles.

But if we add the users manually we are able to add/remove the respective users successfully.

Cause Users without an HR scoped role are blocked from viewing HR cases or HR profile information. Only the HR Administrator [sn_hr_core.admin] can assign scoped HR roles.

As an admin user, you are able to add users to the group manually. But by doing it through the script as the system the system will not be able to add it.

Here if the workflow is executed by System which doesn't have any HR role, the workflow should be executed by the user who has an HR role, then the users would get added to the group as expected.

HR application is sensitive so OOTB 'system' user doesn't have any HR roles associated automatically.

This is expected behavior that we have to provide explicitly HR role to the user who set in 'Run As' to execute workflow or any scheduled job for HR groups.

Resolution We don't have an option to run the workflow other than System. You can try to configure the scheduled job and put a logic to update the group and "Run As" by the user (who has HR related roles) and check if it does the required job.

OR

You can use a custom script to impersonate the user who has 'sn_hr_core.admin' in the Run script activity.