Symptom
When Business Role: Product Master Date Specialist is write restricted, the Export Master Data (F3251) application cannot be used.
Environment
SAP S/4HANA Cloud Public Edition
Reproducing the Issue
- Logon to Fiori Launchpad
- Find the application called: Export Master Data
- With restricted role try to export data
Cause
Export activity is a write action, means writing the data in an external source.
Resolution
The application works as designed. In Cloud environment there is only read and write action. As exporting the data means, writing the data in an external source, in case of the export to an external file, the export functionality is coupled with the authorization of write actions.
There is also a combined activity with the Mass Maintenance/Mass Processing App. This means, that exporting the file and after doing some changes, the data can be directly uploaded/mass maintained. For this activity also the write action is needed. This behavior (export functionality is explicitly a write action/operation) was a requirement from a security expert.
Keywords
Export Master Data; write; restrict; cloud; S/4 HANA; export; Product Master Date Specialist role; , KBA , CA-MDG-CMP-FIO , Fiori UI for Consolidation & Mass Processing , BC-SRV-APS-IAM , Identity and Access Management , Problem