SAP Knowledge Base Article - Preview

2274351 - Include Self and Exclude Self Criteria When Adding a Rule - RBP

Symptom

Under Role Based Permissions (RBP), while adding a rule, the system allows enabling the two options below when granting the Role to any Hierarchical Role:

  • Option 1: Include access to Granted User (Self)
  • Option 2: Exclude Granted User from having the permission access to him/herself

Scenario A

When the both options are enabled, Option 2 will override Option 1. In this scenario granted users will be excluded to have permission access on themselves.

Example: Permission to delete documents (Performance forms).
Significance of the permission: All Managers will be able to look for forms and delete them for their target population but not their own forms.
Concern: When system allows you to select Option 1, it still allows you to check Option 2. This appears to be contradicting in nature.

RBP1.PNG 

Scenario B

Only Include access to Granted User (Self) is enabled: the granted users will be included to have permission access on themselves.
When both options are disabled, granted users will not have permission access on themselves, meaning by default system considers Option 2 as enabled.
Concern: Considering Option 2 is system default, why is there additional checkbox?

RBP2.PNG

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.


Read more...

Environment

SAP SuccessFactors HCM Suite

Product

SAP SuccessFactors HCM Suite all versions

Keywords

SF, success factors, cloud, PLT, platform, BizX, biz x, RBP , KBA , LOD-SF-PLT-RBP , Role Based Permissions , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.