2733842 - Business Role has No Access for Restriction Areas that are Not Maintained - SAP S/4HANA Cloud Public Edition

• There may be authorization errors while using different apps in SAP S/4HANA Cloud Public Edition
• Example "No authorization for maintaining sales documents in <Sales Organization ID>"

SAP S/4HANA Cloud Public Edition

1. Create a Business Role to give access to some app, using Maintain Business Roles
2. Add restrictions to the role, by clicking Maintain Restrictions
3. Update one of the restriction areas to have a value, like setting the Company Code value that the user will have access to
4. Now access the app that the role is providing access to
5. There may be errors even when viewing or creating items for the Company Code that can be accessed

• By default the restriction areas that had no value maintained are set to "No Access"
• Even though being provided access to the correct Company Code, some other authorization is blocking access

If the access is not intended to be blocked by other restriction areas, changing the blank entries to "Unrestricted Access" will stop those restriction areas from having an impact:

1. Create a new role from template
2. Click on Maintain Restrictions
3. Change one of the dropdowns to "Restricted" for Write, Read, or Value Help
4. Now at the top of the "Restricted" section, there is a checkbox that says "Restriction Area and Values"
5. Select that checkbox, which will now select all restrictions that are available for that section
6. [Optional] If restrictions are already set for a role, then all of the restrictions can still be selected in step 5, and just de-select all of the values that already be set (like Company Code in this example)
7. At the top of the section click "Unrestricted Access" which will now set all selected values to "Unrestricted"
8. At this point the default behaviour of the restrictions are now changed to be unrestricted unless otherwise stated
9. Specific options can now be set like Company Code to restricted

KBA , BC-SRV-APS-IAM , Identity and Access Management , Problem