Symptom
"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."
You found the Access Right changes for the Business User and the changes automatically done by Technical User (SAP_SYSTEM).
Environment
- SAP Business ByDesign
- SAP Cloud for Customer
Reproducing the Issue
- Go to Application and User Management Woc
- Select Business User View
- search for the business user and select Edit Access Rights
- Navigate to Changes Tab
Now, you can find access rights is deleted by Technical User (SAP_SYSTEM) in the change log.
Cause
In business configurations, the functionality requiring the removal of all access rights for any user which has run out of validity is marked. When the user became invalid, a background job removed all the access rights of the user.
Resolution
This is the expected system behavior.
You can verify the issue from:
- Go to Business Configuration Woc
- Select Implementation Projects View
- Highlight the project and select Edit Project Scope
- Navigate to Questions Built-in Services and Support > System Management > User and Access Management > Group: Remove authorization for invalid users: Do u want to remove substitutions and authorizations for users whose validity date is in the past.
Keywords
Access Rights, SAP_SYSTEM, Technical User(SAP_SYSTEM), Changes, User Chnages, User Access Rights, Business User , KBA , sap_system , technical user(sap_system) , user access rights , SRD-CC-IAM , Identity & Access Management , How To