Who can create and cancel attestations?

Site Admin and EPM Manager roles can create or cancel an attestation. All users can edit the details of an attestation.