SAP Knowledge Base Article - Public

3234125 - Account Restriction is not Working for Employee


You have created the Access Restrications for Emoloyee on the Accounts, in order to view only selected Accounts for the Employee, However you as an Employee still see all the Accounts and assosciated Master Data.


SAP Business ByDesign

Reproducing the Issue

  1. Login to your BYD tenant
  2. Go to Business User  view
  3. Select the User ex: "USR01" and Click on Edit Access Rights (Here USR01 is the user ID)
  4. You see the Business Role XYZ is assigned and has the restrictions for Particular Accounts ex: ABC & EFG should be visible (Here XYZ is Business Role, ABC & EFG is Accounts)
  5. When user "USR01" logged in to the system, where they have only selected to view the account ABC & EFG. All Accounts and Master Daya is accessible to this user.


In order to get this worked please do check the below points and verify the same.

  1. This could be because the user "USR01" both Work center View Activities (CRM_Activitites) and "Activities with Account Restrictions" is assigned. If you are working with account restrictions you should only assign "CRM_ACTIVITIES1" (Activities with Account Restrictions) this will also influence the value helps for accounts in the sales order. If you assign "CRM_Activitites" the account value helps in CRM documents like sales order and activities will not be restricted.
  2. There are no employees assigned to this sales org. Therefore you cannot flag any employee for which the user allowed access.
  3. User access an account if the selected access group ID (Employee) is matched by an direct responsible employee in the account.
  4. Please note, that for accounts only employee based restrictions can be used.

See Also

Access Rights and Restrictions for Accounts


BPM Accounts, Account Restrictions, User Restrictions, Access Restrictions, SRD-CC-IAM. , KBA , SRD-CRM-ACC , Account Management , Problem


SAP Business ByDesign 2022