Symptom
Set up a restriction for Sales Document Type for Business Role assigned to User.
"Image/data in this document is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."
Environment
SAP S/4HANA Cloud Public Edition
Resolution
- Check Business Roles assigned to user in Maintain Business User app:
As shown above, user have two business roles assigned: SAP_BR_INTERNAL_SALES_REP and SAP_BR_RETURNS_REFUND_CLERK.
- Open the IAM Information System app.
- Select Restriction as the main entity.
- In the search field, enter Sales Document Type and click Go.
- A list of business roles with Sales Document Type as a restriction field will be displayed.
- Filter the list by Business Role ID to verify that both roles (SAP_BR_INTERNAL_SALES_REP and SAP_BR_RETURNS_REFUND_CLERK) have the Sales Document Type restriction available.
- Add the Business Role ID in the filters, and check that both business roles have Sales Document Type available:
- Go to Maintain Business Role app, in order to maintain Restrictions for Sales Document Type for the following business roles (SAP_BR_INTERNAL_SALES_REP and SAP_BR_RETURNS_REFUND_CLERK):
In this example, Under Sales Document Type, set Write Access to the specific document type CBAR, however to not want to place other restrictions on role which will be assigned to user (Unrestricted).
Note: When you put a restriction on a field, in this example, put CBAR as a document type (for write) means, this ensures that the user can only create CBAR document types.. This restriction should be added to all business roles assigned to the user.
Testing the Restriction
As mentioned previously, the step above needs also to be done for business roles SAP_BR_RETURNS_REFUND_CLERK.
After business roles maintained, you can try a test:
- Open the Create Sales Orders (VA01) app.
- Attempt to create a sales order using Order Type OR.
Note: The system should deny authorization for OR document type while allowing creation of CBAR as configured.
See Also
2598733 - Maintain Restriction in Business Role
Keywords
SAP S/4HANA Cloud Public Edition, Public Cloud, restrictions, restricted, Maintain business user, Maintain business role, Sales Document Type, business role, document type, Business Role ID, Maintain Business User, restrict access, roles restriction , KBA , SD-SLS , Sales , SD-SLS-2CL , Sales (Public Cloud) , BC-SRV-APS-IAM , Identity and Access Management , How To