SAP Knowledge Base Article - Public

2684636 - The Employees View Displays Employees That do not Match the Business User's Authorization


A Business User is assigned to a Role with Access Context 2008 - Org. Unit and Restriction Rule 1 - Sales Organization of Employees. With the Access Rights settings of this Business User, the view Employees is restricted to specified Sales Units. Now, when accessing the Employees view, it is expected to see Employees of the specified Sales Units only. But also Employees of other Org Units are visible.


SAP Cloud for Customer Sales / Service

Reproducing the Issue

  1. Select the Employees view.
  2. Check the Org Units maintained in the Department column.
  3. Not all Org Units match the Sales Units to which your Business User is restricted.


In the Employees view, the Business User's authorization allows to see all Employees with assignments to the Sales Units to which the Business User is restricted. In case an Employee is assigned to several Org Units and the respective Sales Unit is not the Primary assignment, it will not be the visible in the Department column. But the Employee will nevertheless be available for the Business User in the Employees view. Also in case the Org Unit of the Employee is not a Sales Unit itself, but the next parental Sales Unit matches the one to which the Business User is restricted, the Employee will be visible.


This is the expected system behaviour.


KBA , LOD-CRM-EMP , Employee , Problem


SAP Cloud for Customer add-ins 1805 ; SAP Cloud for Customer add-ins 1808 ; SAP Cloud for Customer add-ins 1811