Symptom
Removing a permission from a role still allows the user/admin rights to perform the action
Environment
SAP SuccessFactors Learning
Reproducing the Issue
- System Admin > Security > Role Management > Edit Role
- Select permissions tab
- Remove action (in this case: Search > Search Assignment Profile)
- When using the Admin assigned to this role when navigating to User > Assignment Profile, it should show a blank screen.
Cause
When an admin/user has multiple roles, any permissions granted in other roles provide access.
Resolution
If one role has a permission and the others do not then access is still granted, so ensure all roles assigned to admin/users do not have grant access to permissions you do not want the user to have.
Keywords
sap, sf, lms, learning, role, workflow, multiple, roles, workflow, permission , KBA , LOD-SF-LMS-WOR , Roles & Workflows , LOD-SF-LMS , Learning Management System , Problem
Product
SAP SuccessFactors Learning all versions