Symptom
When you try to define the Restriction Rule 99, system takes longer time to process your action which may result in a time out error or system is unresponsive
Environment
SAP Sales Cloud
SAP Service Cloud
Reproducing the Issue
- Go to Administrator work center
- Select Business Role option
- Edit a Business Role
- Go to Access Restriction facet
- Select the Customers row
- Define a rule
- Select Restriction Rule 99
Cause
Its a known issue with Restriction Rule 99. This occurs when there are lots of access groups belong to the selected access context code. System gives the time out error while creating the hierarchy among these access groups to show it on the screen.
Resolution
Calculation rule 99 which is freestyle definition of restrictions is only a fall back functionality, having business roles with fixed restrictions will defeat complete purpose of business roles, which were supposed to be more dynamic, calculate / determine restrictions based on user's properties the sales unit to which they belong to.
So, provide authorization (by using other restriction rule, other than 99) to user based on business role using existing restriction calculation rule.
In case existing restriction calculation rules are not cater to the needs of business use case, so we kindly request you to post this query in the forum SAP Customer Influence Site (https://influence.sap.com/SAPCloudforCustomer) to the access context owners to provide required logically determinable calculation rule which can be implemented for them.
You can also go through below SAP Blog of Access Control Management: https://blogs.sap.com/2015/07/30/access-control-management-access-restrictions-explained-restriction-rules/
Keywords
restriction rule 99, busines role, rule time out, , KBA , SRD-CC-IAM , Identity & Access Management , Problem