Symptom
You have noticed that employees have permission to edit certain MDF objects like Department, Business Unit or Country but you would like to restrict this permission to avoid changes that might cause errors.
"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."
Environment
SAP SuccessFactors Employee Central (EC) - All Versions
Reproducing the Issue
- Go to manage data;
- Select the object that you should not have access;
- See that the object can be edited;
OR
- Go to manage data;
- Select an object for example legal entity;
- See that legal entity uses another object for country;
- Click on the card to see the country;
- See that you have permissions to edit the object country
Cause
Missing Security configuration for the MDF object under Object Definitions
Resolution
- Go to configure object definitions and select the object that you should not have access to edit;
- Click on Take Action> Make Correction;
- Scroll down until you reach the security session;
- In that session you need to select the following:
- Secured: Yes;
- Permission Category: Miscellaneous Permissions
IMPORTANT NOTE: As soon as you set this and save, all the users will lost access to this object so you must go to manage permission roles and give the permission under Miscellaneous Permissions for that objects for the role you desire.
Keywords
KBA , LOD-SF-EC-RBP , Roles & Permissions (EC Core only) , LOD-SF-EC-FOO , Foundation Objects (Organisation, Pay and Job Structures) , How To