SAP Knowledge Base Article - Public

2717282 - b1811: Blocking of Time Account Details for Permanent Time Accounts

Symptom

Prior to 1811 release, it is only possible to restrict access to time account details for recurring time accounts. For permanent time accounts, data blocking for individual time account postings is not possible, hence, when time account is blocked other data such as account postings and account balances are also blocked since permanent time accounts do not have an end date

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Environment

  • SAP SuccessFactors Employee Central
  • SAP SuccessFactors Employee Central Time Off
  • People Profile (PP3)

Resolution

It is now possible to configure data blocking for Time Account Details of permanent time accounts independently from the Time Account object. Access period can now be set for time account details object to restrict users or user groups from seeing the individual time accounts postings in the Time Administration Workbench for permanent time accounts, e.g., Managers or Time Administrators should only see the time account details/postings for time account for only 2 years in the past.

To configure data blocking for time account details of permanent time accounts:

1. Go to Admin Center > Configure Object Definitions then search for 1.) Object Definition and 2.) Time Account Details.

ConfigureObjectDefinition_TimeAccountDetails.png

2. Click on Take Action then select Make Correction.

ConfigureObjectDefinition_Correction.png

3. Scroll down to Security section and then set Secured to Yes and then assign the object to a Permission Category i.e. Time Management Permissions and then click Save.

TimeAccountDetailSecurity.png

4. Go to Admin Center > Manage Permission Role and then select the permission role of user group where you want to block access for time account details.

5. Click Permission... button then select the relevant permission category, in this example, Time Management Permissions then grant View only permission for Time Account Detail object. Click Done.

RBPTimeAccountDetails.png

6. Scroll down to Grant this role to... section then click on Edit Granting link.

RBPTargetPopulation.png

7. In the Grant this role to... window, scroll down to Data Access Period Setting and then change access to Restricted for Time Account.Time Account Details object and then define access period, e.g. 24 months (2 years). Click Done.

DataAccessPeriodTAD.png

8. Click on Save Changes button to apply the changes to the permission role.

Before: All time account postings are shown for the permanent time account

TimeAccountPostingsSalesDemo.png

After: Time Account Details are blocked as per the data access period settings defined for the Time Account Details object. In this example, account postings for the past 24 months are no longer shown.

TimeAccountDetailsBlocked.png

See Also

Keywords

Data Blocking, GDPR, time account details, data access period settings, permanent time account, time account postings, 1811, TIM-4069 , KBA , LOD-SF-EC-TIM , Time Off , Product Enhancement

Product

SAP SuccessFactors Employee Central 1811