SAP Knowledge Base Article - Public

2296368 - A user can edit employee data but they are only granted the permission to view and not to edit

Symptom

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

 

  • A user can edit employee data but they are only granted the permission to view employee data
  • In manage role based permissions -  employee data, the user has view rights only.
    Capture.PNG
  • The user can edit employee data via manage users such as employee last name and the changes are applied to the instance.

Environment

SAP SuccessFactors HXM Suite

Reproducing the Issue

  1. Navigate to the admin center
  2. Update User Information
  3. Manage Users
  4. Edit any employee data 
  5. Save
  6. The changes are applied in the instance

Cause

  • Although the user only has acess to view employee data only, they also have access to 'Manage Users'.
  • This is why the can edit employee data.

Resolution

  • The permission of 'Manage Users' will not be impacted by employee data permission. They are two different permissions. Once the user has access to 'Manage Users', he/she can edit the fields for the users who they can search for using the 'Manage Users' function.
  • Any change made via manage users will be applied to the instance.

Note: user guide can be found at Managing User Information

See Also

Managing User Information

Keywords

RBP, Manage Users, PLT-48271 , KBA , LOD-SF-PLT , Platform Foundational Capabilities , LOD-SF-PLT-RBP , Role Based Permissions , Problem

Product

SAP SuccessFactors HCM Core all versions