Application implementation role give edit access to Worker employment/personal records

We have a requirement from the business to give read/view only access to Worker Employment/Personnel data and they should not be able to modify their HR data.

Also, in addition they need set up and maintenance access to perform all the admin related set up and configuration tasks.

To meet these requirements, we have created 2 custom roles cloned as below:

Custom Job Role:

Human Resource Analyst HRIT Job – To give read only access (cloned of Human Resource Analyst)

Application Implementation Consultant HRIT Job (cloned of Application Implementation Consultant)

Data Role:

Human Resource Analyst HRIT Data

Application Implementation Consultant HRIT Data