SAP Knowledge Base Article - Public

2159508 - Permission removed from admin role but action is not restricted

Symptom

Removing a permission from a role still allows the user/admin rights to perform the action

Environment

SAP SuccessFactors Learning

Reproducing the Issue

  1. System Admin > Security > Role Management > Edit Role
  2. Select permissions tab
  3. Remove action (in this case: Search > Search Assignment Profile)
  4. When using the Admin assigned to this role when navigating to User > Assignment Profile, it should show a blank screen.

Cause

When an admin/user has multiple roles assigned to them, any permissions granted in other roles provide access.

Resolution

If one role grants a permission, access is allowed even if other roles do not. Therefore, ensure that none of the roles assigned to an admin or user grant permissions you don’t want them to have.

Keywords

sap, sf, lms, learning, role, workflow, multiple, roles, workflow, permission , KBA , LOD-SF-LMS-WOR , Roles & Workflows , LOD-SF-LMS , Learning Management System , Problem

Product

SAP SuccessFactors Learning all versions