3234125 - Account Restriction is not Working for Employee

Access restrictions have been created for the employee on the accounts to allow viewing only selected accounts. However, the employee still sees all accounts and the associated master data.

SAP Business ByDesign

1. Navigate to the Application and User Management work center.
2. Go to the Business Users view.
3. Select the user and click Edit Access Rights.
4. Confirm that the respective Business Role is assigned to the user and that it includes restrictions allowing visibility to only specific accounts, such as ABC and EFG (ABC and EFG are the Accounts).
5. When the user logs into the system, despite having access restricted to accounts ABC and EFG, all accounts and associated master data remain visible and accessible.

To ensure proper functionality, please review and verify the following points:

1. The issue may be caused by the user being assigned both the work center view "Activities" (CRM_ACTIVITIES) and "Activities with Account Restrictions" (CRM_ACTIVITIES1). When working with account restrictions, only CRM_ACTIVITIES1 should be assigned. This ensures account value helps are restricted appropriately in CRM documents such as sales orders and activities.
   
   
2. Assigning CRM_ACTIVITIES will override these restrictions, resulting in unrestricted access to account value helps in CRM documents.
   
   
3. No employees are currently assigned to the relevant sales organization, which prevents access from being limited based on employee assignments.
   
   
4. A user can access an account only if the selected access group ID (Employee) matches an employee directly responsible for that account.
   
   
5. Note that, for accounts, only employee-based restrictions are applicable.

Access Rights and Restrictions for Accounts

BPM Accounts, Account Restrictions, User Restrictions, Access Restrictions, SRD-CC-IAM , KBA , SRD-CRM-ACC , Account Management , How To