Symptom
A Business User is assigned to a Role with Access Context 2008 - Org. Unit and Restriction Rule 1 - Sales Organization of Employees. With the Access Rights settings of this Business User, the view Employees is restricted to specified Sales Units. Now, when accessing the Employees view, it is expected to see Employees of the specified Sales Units only. But also Employees of other Org Units are visible.
Environment
SAP Cloud for Customer Sales / Service
Reproducing the Issue
-
Select the Employees view.
-
Check the Org Units maintained in the Department column.
-
Not all Org Units match the Sales Units to which your Business User is restricted.
Cause
In the Employees view, the Business User's authorization allows to see all Employees with assignments to the Sales Units to which the Business User is restricted. In case an Employee is assigned to several Org Units and the respective Sales Unit is not the Primary assignment, it will not be the visible in the Department column. But the Employee will nevertheless be available for the Business User in the Employees view. Also in case the Org Unit of the Employee is not a Sales Unit itself, but the next parental Sales Unit matches the one to which the Business User is restricted, the Employee will be visible.
Resolution
This is the expected system behaviour.
Keywords
KBA , LOD-CRM-EMP , Employee , Problem