Symptom
All the users in business role ABC (ABC represents the business role) do not have the access to create new accounts.
Reproducing the Issue
You have restricted the access restriction of "Account" Woc view (as the rule:Sales Organization of Employee) for the business role ABC.
- Login the system with any user ID in business role ABC
- Go to Customers Woc
- Navigate to "Account" Woc view
- Click New button to create a new accout.
- Click in Save and Open
You notice an error message saying that you do not have the access to create new accounts.
Cause
- You removed the authorization for unassigned data records (Business Configuration scoping question "Do you want in general restrict access to data records that do not contain any access restriction relevant content?"). On the other hand, the user is, via business role, authorized for all accounts having sales data for the user's sales organization. As it's not possible to maintain sales data and also not possible to create "homeless" accounts according to the Business Configuration mentioned before, so the user cannot create new acccounts.
- If the question "Do you want in general restrict access to data records that do not contain any access restriction relevant content?" is not checked, mind that accounts with sales data for sales org cannot be created in the standard Account Quick Create.
Resolution
You have 2 options to resolve this issue.
Option 1: Do not remove the authorization for unassigned data records
- Go to the Business Configuration work center.
- Go to Implementation Projects view.
- Edit project scope for the implementation project.
- Navigate to step 4 "Questions".
- Expand Built-in Services and Support -> System Management -> User and Access Management.
- Uncheck the question "Do you want in general restrict access to data records that do not contain any access restriction relevant content?".
Please note that Accounts with sales data for a sales org cannot be created in the standard Account Quick Creation. To be able to create and save it, the defaulted owner has to be blanked, then the account would be "homeless".
Option 2: If you want to remove the authorization for unassigned data records, then you have to choose a restriction rule for the Accounts woc view restricted by employee or territory, but not a restriction rule restricted by sales data or sales organization.
Keywords
KBA , LOD-CRM-ACC , Account , Product Enhancement