2094229 - Field Level Overrides Permission for MDF objects - Metadata Framework

• How to restrict permissions to MDF Objects at field level?
• What is the "Field Level Overrides" option available in RBP for MDF Objects?

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SAP SuccessFactors HCM Suite
• Metadata Framework (MDF)

When granting permissions to MDF Objects, it's possible to further restrict a user's permissions to only see or not even see a specific field when viewing the object. This kind of restriction is achieved by using the "Field Level Overrides" option in RBP, when granting permissions to MDF Objects.

• For example, a company may want to allow managers to change some details of the Position object for Succession Planning, but only allow HR Business Partners to edit the "Position Criticality". So, in the Managers permission role, you'd grant access to Insert/Correct for the Position object, but use the "Field Level Overrides" option to restrict the permission of field "Position Criticality" to "Read Only". The result will be that, when a manager is editing a Position, he/she will not be able to edit the "Position Criticality" field, but only to see it.
• Similarly, there may be some fields that only the Admin Users should be able to see. For example, the Position object may have a "Source of Creation" field, which is useful to help managing the Position Data, but not so useful for the Managers. In this case, you'd be able to use the "Field Level Overrides" option to set up "No Access" restriction for the "Source of Creation" field. The result will be that, when a manager is viewing the details of a Position, he/she will not be able to see the "Source of Creation" field at all.

To configure this, please follow the steps below:

1. At 'Admin Center' > go to 'Manage Permission Roles' page
2. Select the role you wish to adjust the permission
3. Search for the custom object name
4. At 'Field-Level Overrides', select the field you wish to restrict the permission to (No Access/Read-Only)
5. Save it

See the screenshot below for reference:

NOTE: It's important to note that when a single user has multiple field level overrides set up for the same field from different permission roles, the role with higher privileges will take precedence.

• SAP Help Portal - Implementing the Metadata Framework (MDF) - Setting Up Security for Fields
• KBA 2538520 - RBP Security on for accessing MDF objects on Manage Data
• KBA 2303419 - RBP Permission for MDF Composite Child Object does not respect Target Population for Field Level Overrides
• KBA 2841385 - Restricting MDF Values in Drop-down Based on Target Population

MDF Metadata-Framework EC Succession Field Level Overrides permission MDF Objects, field-level, permission, mdf, object, Field-Level Overrides, , KBA , LOD-SF-MDF-RBP , RBP Permissions on Objects , LOD-SF-SCM , Succession Management , LOD-SF-EC-MDF , MDF & EC2MDF Migration , LOD-SF-EC-RBP , Roles & Permissions (EC Core only) , How To