Symptom
When modifying existing Benefit Enrollment records, on save an error is encountered.
Error: You do not have the necessary permission
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Environment
Employee Central - Global Benefits
Reproducing the Issue
1. Go to Manage Data or Benefits Admin Overview
2. Select 'Benefit Enrollment'
3. Take Action -> Make Correction on a record
4. Make a change
5. Save
6. Error: You do not have the necessary permission
Cause
User making the change does not have 'Manage on behalf of Employee' permission.
Resolution
Since 2105 1H release it is required that users modifying existing enrollments must have the 'Manage on behalf of Employee' permission. This permission no longer just applies when modifying/enrolling via User Profiles.
This permission is located under 'Manage Benefits' section of permission role.
This was introduced in 2105 release for security reasons as the permission should be considered when modifying users Enrollments via Manage Data or Benefits Admin Overview.
From Manage Data or Benefits Admin Overview, when modifying Enrollments you are managing those enrollments on behalf of the Employee so this permission must be considered.
Keywords
You, do, not, have, the, necessary, permission, Manage, on, behalf, of, Employee, Benefit, Benefits, Enrollment, record, edit, modify, unenroll, delete, take, action, update, correct, remove, 2105 , KBA , LOD-SF-EC-GBF , Global Benefits , LOD-SF-EC , Employee Central , LOD-SF-EC-RBP , Roles & Permissions (EC Core only) , Problem