Symptom
- Changes to Permissions are not selectable: tool tip shows message: Warning: Invalid permission! Please contact Product Support.
- When going to Manage Users and granting Rehire-related permissions, unable to select / check permissions.
- Within the customer enabled Benefits module in EC, when trying to slect the permissions in roles, they are not available and greyed out.
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Environment
- SAP SuccessFactors HXM Suite - Latest Role based permission 1H 2022 release.
- SAP SuccessFactors Employee Central
Reproducing the Issue
Note: the following steps in "Reproducing the issue" is based on feature "Income Tax Declaration" and "Resolution" are an example on permission related to Benefits, but these exact steps also apply to permissions related to rehire too. See info and script IDs at the bottom of this KB article in the "Resolution" section for all the various permissions areas these steps apply to.
- Enable Income Tax Declaration feature in Provisioning
- Go to Admin Center
- Search for Manage Permission Roles
- Select the role you need to grant the access and hit "permission"
- Add the Permissions (In my example we are using options under 'Manage Income Tax Declarations')
6. Try to select the permission(s).
7. You will notice that the permissions were not selectable and greyed out.
Cause
This is an environment issue usually caused by a missing/failed database upgrade script.
Resolution
Note: If you are a customer you do not have access to Provisioning, you need to contact your implementation partner or create an case with Support.
FOR PARTNERS AND SAP SUPPORT ONLY:
- Logon into Provisioning and choose the company.
- Navigate to Managing Job Scheduler > Manage Scheduled Jobs
- In Manage Scheduled Jobs click Create New Job
- On the Create New Job page, fill in the following parameters:
- Job Name: (any text which can identify this job)
- Job Owner: (usually the system admin / super user)
- Job Type: Company Schema Upgrade Job
- Rerun Options: the XML file name, example: add_permission_for_ect_benefits_admin.xml
- IMPORTANT NOTE: Each permission has its own script and this field needs to be filled with one of the valid scripts. For the script names, check section at the end of this KBA.
- Occurrence: Once
- Click button: Create Job
- From the Manage Scheduled Jobs page fine the job you just created
- In the column Actions click the Select button
- Choose Run it Now
- Go to the Monitor Jobs page
- Choose Job Type: Company Schema Upgrade Job
- Click Refresh
- Notice the job's Status may be In Progress:
- After some time the Status should be Completed:
- You will need to repeat the same action for each permission that you face issues based on the scripts below:
Scripts names for Rerun Option Field:
- add_permission_for_ect_benefits_admin.xml (Already created in the steps above)
- add_permission_for_ect_benefits_admin_overview.xml
For Rehire-related permissions, please use the following script IDs:
- Rehire Inactive Employee with New Employment: add_permission_for_rehire_inactive_employee_with_new_employment.xml
- Rehire Inactive Employee with New Employment (by 'match' in New Hire): add_permission_for_rehire_with_new_employment_from_hire_match.xml
- Rehire Inactive Employee (by 'match' in New Hire): add_permission_for_rehire_from_hire_match.xml
- “Allow Manage Others Save Draft”: add_permission_for_allow_manage_others_save_draft.xml
For Income Tax related permission use following script:
- add_custom_RBP_to_ItDeclaration.xml
Note:
- It can take some time to update in the instance, please give at least one hour before creating a case with Product Support.
- If after running the jobs the Permissions are still not selectable then, go to Provisioning > Company Settings > Run the "Refresh RBP Permission Configuration".
Frequently Asked Questions
How many jobs must be run?
For each permissions listed above a separate job must be run, with the required script.
Can the jobs all run at the same time?
Run each job individually, waiting for completion on one before running the next.
Can the jobs be ran during working hours?
Yes, however it's recommended they are run outside of business hours as there should be no changes to permission roles occurring at the time of the job run.
Product support please see internal memo for list of XML's to be given in job parameter.
See Also
Keywords
SF, success factors, EC, benefits, ECT-89941, not saving, Provisioning, Script, ECT-87646, rehire, Rehire Inactive Employee with New Employment, Rehire Inactive Employee, use this match, income tax declaration, Match, Rehire by Match, Company Schema Upgrade Job,Warning: Invalid permisison! Please contact Product Support, permisisons not selectable, orange check box. , KBA , LOD-SF-EC-RBP , Roles & Permissions (EC Core only) , LOD-SF-EC , Employee Central , LOD-SF-PLT-RBP , Role Based Permissions , How To