SAP Knowledge Base Article - Public

3154746 - S/4HANA Cloud Custom Business Object Audit App is editable instead of read only

Symptom

You published a CBO with Data Access Management and the Custom Business Object Audit (SCBA) App is editable instead of read-only. 

Environment

SAP S/4HANA Cloud

Cause

  • *CustomBusinessObjectName*_SCBA and *CustomBusinessObjectName*_SCBO have different Business Catalogs assigned to the same Business Role.
  • *CustomBusinessObjectName*_SCBA and *CustomBusinessObjectName*_SCBO have the same Business Catalogs assigned to the same Business Role.

When you use different or same Business Catalogs in the same Business Role, all the authorizations of SCBO will overwrite the SCBA ones and even the Audit User will have access to edit. 

Resolution

The generated CBO application *CustomBusinessObjectName*_SCBA is aimed for auditor users and the *CustomBusinessObjectName*_SCBO for Business Users. This means that you need to have two different business roles/business catalogs.

I propose that you try to create a specific Business Role for the SCBA application, using the Business Catalog SAP_CA_BC_EXTERNAL_AUDIT_PC. I suggest that you use the Business Role Template SAP_BR_EXTERNAL_AUDITOR suggested for this Business Catalog and then you can assign this new Business Role to the users that must have the read-only access. Also, for the SCBO application, you should use another Business Catalog and another Business Role. 

Important: After you make those changes, the users with the read-only access will still be able to click on the "Create" button, but if they try to create anything they will receive an error of missing authorization.

See Also

SAP Blog Post | Data Access Management for Custom Business Objects

SAP Blog Post | Unboxing Custom Business Object in S/4HANA Cloud

SAP Help Portal | Managing Data Access

Keywords

Custom Business Object Audit, read only, read-only, edit, maintain, SCBO, SCBA, Custom Business Object, CBO, Data Access Management, Business Role, Business Catalog, *CustomBusinessObjectName*_SCBO, *CustomBusinessObjectName*_SCBA, restrict, create , KBA , BC-SRV-APS-EXT-BO , Custom Tables and Nodes , Problem

Product

SAP S/4HANA Cloud Public Edition all versions