Symptom
"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."
- A user can edit employee data but they are only granted the permission to view employee data
- In manage role based permissions - employee data, the user has view rights only.
- The user can edit employee data via manage users such as employee last name and the changes are applied to the instance.
Environment
SAP SuccessFactors HXM Suite
Reproducing the Issue
- Navigate to the admin center
- Update User Information
- Manage Users
- Edit any employee data
- Save
- The changes are applied in the instance
Cause
- Although the user only has acess to view employee data only, they also have access to 'Manage Users'.
- This is why the can edit employee data.
Resolution
- The permission of 'Manage Users' will not be impacted by employee data permission. They are two different permissions. Once the user has access to 'Manage Users', he/she can edit the fields for the users who they can search for using the 'Manage Users' function.
- Any change made via manage users will be applied to the instance.
Note: user guide can be found at Managing User Information
See Also
Keywords
RBP, Manage Users, PLT-48271 , KBA , LOD-SF-PLT , Platform Foundational Capabilities , LOD-SF-PLT-RBP , Role Based Permissions , Problem
Product
SAP SuccessFactors HCM Core all versions