Standard security req'd to add new employee record

Hi there

What are the standard apps a user needs access to in order to add a new employee record? 

We have given access to the obvious apps (and tried some less obvious ones) but when the user chooses "finish" after entering the reason code they get the "you are not authorized to run this app" message.  However, all the files (that I know of) are updated with the new record, which is strange.

So I am wondering if there is a hidden/obscure app that we have missed granting that they need access to or if this is possibly a false error message.  That said, if I give *all access there is no message which leads me to believe I must be missing something on the security side.