Hi Folks
I have solved this issue by thoroughly reading IBM documentation instead of skimming it. The answer is in IBM support:
https://www.ibm.com/support/pages/creating-new-start-center-maximoSpecifically a note that says:
"
For the Layout and Configuration application, make sure that the option Can Create Template is checked."
after it lists the applications to which the security group will need at least read access.
So, problem solved by just paying attention to the words on the page.... : )
Regards
Stewart