SAP Knowledge Base Article - Public

2234396 - How to Limit Access of Administration User


How to limit access of Administration user.

Your requirement is it to have an admin role which has exactly the same right as ADMINISTRATOR_ALL except the rights for user and role management.

Reproducing the Issue

  1. Login to the Silverlight UI of Cloud for Customer system.
  2. Go to the Administration work center.
  3. Go to the Overview view.
  4. Under Users section the user has the access to Business Role and Business Users.

You want to restrict the user's access to Business Role and Business Users.


Business role is not configured for the requirement.


  1. Go to the Application and User Management work center.
  2. Go to the Business Users view.
  3. Go to the Business Roles view.
  4. Search and open business role ABC (ABC represents the business role assigned to the user).
  5. Go to the Access Restrictions tab.
  6. For work center view name Business Users and Employees:
    • Select Read Access as Restricted and select the restriction rule as Functional unit of the user.
    • Select Write Access as No Accesss.


KBA , limit access of administration user , administrator_all , SRD-CC-IAM , Identity & Access Management , How To


SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions