SAP Knowledge Base Article - Public

2684856 - Access Restrictions for Employee Not Working


User ABC (ABC represents the user ID) is able to edit employees even though he is assigned to the business role DEF (DEF represents the business role ID) which has maintained write access for Employees as No Access.


SAP Cloud for Customer

Reproducing the Issue

  1. Login as the user ABC.
  2. Go to the Administrator work center.
  3. Go to the Users view.
  4. Go to the Employees sub view.
  5. Select the employee XYZ (XYZ represents the employee name).
  6. Press Edit.
  7. Perform some change.
  8. Save.
  9. The system allows to save the changes, even with no write access maintained to the business role DEF.


The user has unrestricted write access to the General Settings view in Administrator work center.


This is the standard behaviour of the system.

If you need this functionality urgently you may contact your implementation manager to help with such request or approach directly the SAP Cloud Service Center.

You can find more details about the services offered by Cloud Service Center on . You can contact Cloud Service Center as follows:

  1. If you are a partner: please use or the Partnerfinder
  2. If you are a customer: please use the little blue box “Contact Us” shown on the very right hand side of, choose “Contact Us”, choose “Services”, choose “SAP Custom Development” and complete the page

Note: The services of the SAP Cloud Service Center will be charged as packaged services based on fixed prices. 

An alternative option may be to check the SAP Customer Influencer Site to submit an idea:


Employee, Access Restrictions, General Settings, Edit , KBA , LOD-CRM-EMP , Employee , How To


SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions