SAP Knowledge Base Article - Public

2982860 - Creation of Objects Possible For Accounts, Even Without Having Write-Access for the Account

Symptom

It is possible for users to create opportunities for accounts - even if they do not have write-access for this particular account.

Environment

SAP Cloud for Customer

Cause

As long as the user has read-access for the account, the user can create objects, for example an opportunity, for this account.

We refer to this as a "forward scenario". The opportunity will then not be accessible for the user anymore once it is edited by another user, if restriction rules are applicable.

So in general this implies that you can also create objects for sales areas you are not responsible for.

Resolution

It is the expected current system behaviour that a user can create objects for sales areas they are not responsible for, if they have access to accounts from there.

See Also

Blog: Access Control Management: Access restrictions explained – Restriction Rules

Keywords

possible to create, can create without access, Access Restriction 1015 not working , KBA , LOD-CRM-OPP , Opportunity Management , How To

Product

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions