SAP Knowledge Base Article - Public

2159508 - Permission removed from admin role but action is not restricted

Symptom

Removing a permission from a role still allows the user/admin rights to perform the action

Environment

SAP SuccessFactors Learning

Reproducing the Issue

  1. System Admin > Security > Role Management > Edit Role
  2. Select permissions tab
  3. Remove action (in this case: Search > Search Assignment Profile)
  4. When using the Admin assigned to this role when navigating to User > Assignment Profile, it should show a blank screen.

Cause

When an admin/user has multiple roles, any permissions granted in other roles provide access.

Resolution

If one role has a permission and the others do not then access is still granted, so ensure all roles assigned to admin/users do not have grant access to permissions you do not want the user to have.

Keywords

sap, sf, lms, learning, role, workflow, multiple, roles, workflow, permission , KBA , LOD-SF-LMS-WOR , Roles & Workflows , LOD-SF-LMS , Learning Management System , Problem

Product

SAP SuccessFactors Learning all versions