Symptom
Access restrictions have been created for the employee on the accounts to allow viewing only selected accounts. However, the employee still sees all accounts and the associated master data.
Environment
SAP Business ByDesign
Reproducing the Issue
- Navigate to the Application and User Management work center.
- Go to the Business Users view.
- Select the user and click Edit Access Rights.
- Confirm that the respective Business Role is assigned to the user and that it includes restrictions allowing visibility to only specific accounts, such as ABC and EFG (ABC and EFG are the Accounts).
- When the user logs into the system, despite having access restricted to accounts ABC and EFG, all accounts and associated master data remain visible and accessible.
Resolution
To ensure proper functionality, please review and verify the following points:
- The issue may be caused by the user being assigned both the work center view "Activities" (CRM_ACTIVITIES) and "Activities with Account Restrictions" (CRM_ACTIVITIES1). When working with account restrictions, only
CRM_ACTIVITIES1
should be assigned. This ensures account value helps are restricted appropriately in CRM documents such as sales orders and activities. - Assigning CRM_ACTIVITIES will override these restrictions, resulting in unrestricted access to account value helps in CRM documents.
- No employees are currently assigned to the relevant sales organization, which prevents access from being limited based on employee assignments.
- A user can access an account only if the selected access group ID (Employee) matches an employee directly responsible for that account.
- Note that, for accounts, only employee-based restrictions are applicable.
See Also
Keywords
BPM Accounts, Account Restrictions, User Restrictions, Access Restrictions, SRD-CC-IAM , KBA , SRD-CRM-ACC , Account Management , How To
Product
SAP Business ByDesign all versions