SAP Knowledge Base Article - Public

2661330 - Authorization of the Business User is Deleted by Technical User (SAP_SYSTEM) automatically

Symptom

 "Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

You found the Access Right changes for the Business User and the changes automatically done by Technical User (SAP_SYSTEM).

Environment

  • SAP Business ByDesign
  • SAP Cloud for Customer

Reproducing the Issue

  1. Go to Application and User Management Woc
  2. Select Business User View
  3. search for the business user and select Edit Access Rights
  4. Navigate to Changes Tab


Now, you can find access rights is deleted by Technical User (SAP_SYSTEM) in the change log.

chnage log.jpg

Cause

In business configurations, the functionality requiring the removal of all access rights for any user which has run out of validity is marked. When the user became invalid, a background job removed all the access rights of the user.

Resolution

This is the expected system behavior.

You can verify the issue from:

  1. Go to Business Configuration Woc
  2. Select Implementation Projects  View
  3. Highlight the project and select Edit Project Scope
  4. Navigate to Questions Built-in Services and Support > System Management > User and Access Management > Group: Remove authorization for invalid users: Do u want to remove substitutions and authorizations for users whose validity date is in the past.

Scoping question.jpg

Keywords

Access Rights, SAP_SYSTEM, Technical User(SAP_SYSTEM), Changes, User Chnages, User Access Rights, Business User , KBA , sap_system , technical user(sap_system) , user access rights , SRD-CC-IAM , Identity & Access Management , How To

Product

SAP Business ByDesign all versions ; SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions