action.report.substitution.rule user access action.report.substitution.rule manager access