Symptom
The Role-Based Permission for National ID prior to 1805 release is a simple on/off permission and allows full access (edit and/or display) to National ID records irrespective of country and type.
In the 1805 release, with the new additional permission setting "National ID (Restricted to only country of legal entity)", customers can restrict the access of users to only the relevant National ID (i.e. the National ID of the country of employment). Any other National ID (e.g. those of other countries entered in the context of previous employment) will be suppressed.
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Environment
SAP SuccessFactors Employee Central
Resolution
Customers who want to prevent their users from viewing any National IDs stored in Personal Information that do not belong to the country of the actual employment (determined by the legal entity) but relate to previous employment in different countries on privacy reasons, can now do so with this new permission setting.
How to enable the new permission
- Navigate to Admin Center > Manage Permission Roles
- Open the Permission Role you wish to update
- Click the "Permission..." button
- In the left panel, under the "User Permissions" section, select "Employee Data"
- In the right panel scroll down to the section "HR Information" and enable both the View and Edit permissions for "National ID (Restricted to only country of legal entity)"
SPECIAL NOTE: For this permission to work, the user must also be granted with the "National ID Information" permission as well.
FAQ
Q) When this permission is granted, will the user still see the National ID information for other countries (not the country defined in the employment)?
A) No. The end user will only be able to view the National ID's that are for the same Country as the employees Employment (Country of Legal Entity).
Q) When I enabled this new permission, will this restrict the view of the Countries list when adding National ID's to an employee?
A) No. But you will receive and error message when trying to save a National ID Card for a country that differs from the Country of the Legal Entity the employee is assigned to in Job Information.
Q) Should I grant this permission to all users?
A) This permission should be given to users who maintain National ID information. This permission should not be granted to users or roles that require flexibility to add other National ID Cards to employee's where the National ID Cards country differs from that of the Legal Entity of the employee.
Q) Should users only be granted the permission "National ID (Restricted to only country of legal entity)"?
A) If the user needs to add National ID's, then they must still be granted with permission to "National ID Information" as well as then being granted permission to "National ID (Restricted to only country of legal entity)".
Q) When we have an Employee that has multiple National ID's maintained, if this permission is granted to the end user, will they still be able to edit/maintain the National ID for other countries?
A) No. The end user will only be able to successfully edit the National ID's of the country of their employment.
Keywords
ec, employee central, national id, nationalIdCard, 1805, ECT-93958, National ID (Restricted to only country of legal entity), Country/Region of National ID must be the same as country/region of legal entity due to restricted permission, , KBA , LOD-SF-EC-PER , Person Data (All Person Data Types) , Problem