SAP Knowledge Base Article - Public

2696370 - 'No Authorization Granted Based on Account’s Access (Limit of 1.000 Exceeded)'

Symptom

You are using a valid Access Restriction based on Territory and Account but the logon user cannot see Appointments with the correct Territory and Account.

Environment

SAP Cloud for Customer

Reproducing the Issue

Prerequisite: a valid Account based Access Restriction, e.g. 1016 with Restriction Rule 10 for the Business Role of the logon user. Further, an Appointment XYZ (XYZ is the Appointment name) with the corresponding territory and account for the logon user.

  1. Go to the Activities workcenter.
  2. Go to the Appointments view.

Result: You don't have access to Appointment XYZ despite the correct restriction. Further, you see the information message 'No authorization granted based on account’s access (limit of 1.000 exceeded)'.

Cause

The user is directly or indirectly responsible for more than 1000 accounts; there is a hardcoded limit in the system of 1000 to optimize performance. Once this limit is reached, restriction rules cannot be calculated.

Resolution

If the number of account assignments per user is exceeded, the system will grant no access at all for that user. The work lists for the transaction will be empty.  If the user exceeds the assignment via territory team or account team of 1000 customers, you need to find a different approach to grant access for business documents.

This rule only works if the user is directly/indirectly responsible for less than 1000 accounts. This is the designed system behavior.

See Also

https://blogs.sap.com/2017/08/16/inherit-account-access-to-transactional-business-documents/

Keywords

access restriction, appointment, account, territory, employee , KBA , LOD-CRM-ACT , Activities , LOD-CRM-ACC , Account , How To

Product

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions