SAP Knowledge Base Article - Public

3234125 - Account Restriction is not Working for Employee

Symptom

Access restrictions have been created for the employee on the accounts to allow viewing only selected accounts. However, the employee still sees all accounts and the associated master data.

Environment

SAP Business ByDesign

Reproducing the Issue

  1. Navigate to the Application and User Management work center.
  2. Go to the Business Users view.
  3. Select the user and click Edit Access Rights.
  4. Confirm that the respective Business Role is assigned to the user and that it includes restrictions allowing visibility to only specific accounts, such as ABC and EFG (ABC and EFG are the Accounts).
  5. When the user logs into the system, despite having access restricted to accounts ABC and EFG, all accounts and associated master data remain visible and accessible.

Resolution

To ensure proper functionality, please review and verify the following points:

  1. The issue may be caused by the user being assigned both the work center view "Activities" (CRM_ACTIVITIES) and "Activities with Account Restrictions" (CRM_ACTIVITIES1). When working with account restrictions, only CRM_ACTIVITIES1 should be assigned. This ensures account value helps are restricted appropriately in CRM documents such as sales orders and activities.

  2. Assigning CRM_ACTIVITIES will override these restrictions, resulting in unrestricted access to account value helps in CRM documents.

  3. No employees are currently assigned to the relevant sales organization, which prevents access from being limited based on employee assignments.

  4. A user can access an account only if the selected access group ID (Employee) matches an employee directly responsible for that account.

  5. Note that, for accounts, only employee-based restrictions are applicable.

See Also

Access Rights and Restrictions for Accounts

Keywords

BPM Accounts, Account Restrictions, User Restrictions, Access Restrictions, SRD-CC-IAM , KBA , SRD-CRM-ACC , Account Management , How To

Product

SAP Business ByDesign all versions