SAP Knowledge Base Article - Public

2897572 - Access Restriction Rule '02 - Territories' is Not Working for Territories Work Center

Symptom

You have configured an Access Restriction Rule '02 - Territories' for Territories work center for user ABC (ABC represents the user ID), but when the user logon and go to Territories work center, still he can see other territories which is not expected to be seen.

Environment

SAP Cloud for Customer

Reproducing the Issue

Prerequisite:

For a particular user role XYZ, you have set up the Access Restriction for work center Territoires, the Read access restriction rule is "02 - Territories",   rule explanation is: Access based on the employee’s territory assignment only (incl. sub-territories)

The employee ABC is assigned to territory 123 (123 represents the territory ID) in employee data.

  1. Logon with user ABC, which is assignd to user role XYZ.
  2. Go to Sales > Territories work center. Here, you can also see other territories including territory 123.

Cause

Territories are restriced based on their employees which are maintained as "Owner(s)" (Territory-Team), it means those territories are "free" (without owner) can can be seen by every user in the system who has access to the "Territory" OWL in general.

Thus user ABC can see all the territories in system which do NOT have any owner + He can see those territories where he is maintained as owner + He can see territory 123 because he is part of the "Territory-Team" list.

Resolution

You need to assign owners to the territories if you would like to restrict them.

Keywords

access restriction, territory, employee , KBA , LOD-CRM-TM , Territory Management , Problem

Product

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions