SAP Knowledge Base Article - Public

2327695 - Editing/Creating Recurring Deduction is giving error as "No Read/Write Permissions' though permission is given


The user receives an error message:  “Sorry, You not hot have Write/delete permissions for Pay Component [Pay component name (number)] when trying to create a Recurring Deduction

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."


Employee Central 2.0

Reproducing the Issue

  • Log in as User
  • Navigate Employment Information > Click on the 'Edit' button on the Recurring Deduction portlet
  • Try to choose a Pay Component from the dropdown, the below error message is returned



In this case the Recurring Deductions portlets Configuration UI was not configured with a “User” field defined (on the Object it is usually the externalCode field that is set to Type = User").

Although this field is automatically added when creating this type of portlet through the Manage Config UI functionality in Admin Center, this field was not present in the Configuration UI, meaning the administrator most likely deleted it when configuring the UI.

The “User” field is a mandatory field allowing RBP to determine permissions to the employees Recurring Deductions information and is required for the portlet to work.


First, identify (if you do not already know) which Configuration UI is being used by the application by navigating to Admin Center > Manage Data. Search under object "Configure Deduction Screen Ids" for the configuration (there will be just 1 object value).

Then identify which Config UI is being used by checking the value of the "recurringDeductionId" field (expained in the Implementation Handbook in section "Assigning Screen Ids) -:



Then Navigate to Admin Center > Manage Config UI, and find the Recurring Deductions portlet UI you identified and open it for editing.

Add a new field to the UI using the “Add” button while hovering over the top of the layout.



The new field will automatically be an “input” field. You will need to change the field properties by clicking on the pencil next to the field to make it a “userSysId” field. You will not need to change the Name property however you will need to ensure the other properties are set correctly.

When changing the resolver type choose “userSysId” from the dropdown selection. Optionally you may set the visibility of the field to either be displayed in the UI or not.



Once corrected, click OK and then click Save to save the changes.


If you do not want to see the User ID in the portlet UI (when viewing the portlet on the Employment Information page) then set the field properties visibility to “No” for the User field. The User ID field must be present so the RBP has something to use when looking up RBP settings, however, it need not be displayed in the UI.


Redurring Deduction MDF Config UI Permissions Configuration Issue , KBA , LOD-SF-EC-DED , Deductions , LOD-SF-EC-MDF , MDF & EC2MDF Migration , How To


SAP SuccessFactors HCM Core all versions