SAP Knowledge Base Article - Public

3294971 - Company Code (BUKRS) Restriction Type Not Fully Restricting Customer/Supplier in BP Master Data Apps in SAP S/4HANA Cloud

Symptom

  • Set a restriction to only allow certain Customer company codes to be displayed by certain users but the users can still see Customers from the restricted company code
  • Set a restriction to only allow certain Supplier company codes to be displayed by certain users but the users can still see Suppliers from the restricted company code

Environment

SAP S/4HANA Cloud

Reproducing the Issue

Example for Customer Master (Same applies to Supplier)

  1. Create/Edit a Business Role with a BP-related catalog e.g. SAP_CMD_BC_CUST_MAINT_PC
  2. Set a restriction on the Company Code (BUKRS) Restriction Type e.g. only Company Code "1010"
  3. Assign the Business Role to a user
  4. The user can still see Customers who have the 1010 company code in the Manage Customer Master Data app

Cause

The Company Code (BUKRS) Restriction Type does not hide customers or suppliers but rather it will restrict the company code data of the customer/supplier.

For example, a Business Role is restricted to see only Company Code 1010 and user A has this Role but can see customer ABC which has Company Code 1111. Customer ABC will still be visible to the user as they will be able to see the address, customer general data etc. but the company code 1111 will not be visible to the user (in the Manage Customer App it will not appear at all and in the Maintain Business Partner app an authorisation message will prevent the user from accessing the company code data relating to 1111).

Resolution

The Company Code (BUKRS) Restriction Type is intended to only hide the restricted company code data of the Customer or Supplier. It is not intended to hide the entire customer or supplier record if they have the restricted company code but rather only the restricted company code data (customers and suppliers can have multiple company codes).

If a Business Partner and/or Customer and/or Supplier master data record needs to be hidden from users without adequate authorisations then Authorisation Groups can be used. (See blog below) 

See Also

Customer / Supplier Business Partner Master Data: Authorization Groups 

Keywords

SAP S/4HANA Cloud, S4_PC, S4_1C, X4BC, S4HC, S/4HC, Company Code, BUKRS, Restriction, Authorisation Group, Authorization Group , KBA , LO-MD-BP , Business Partners , How To

Product

SAP S/4HANA Cloud Public Edition all versions ; SAP S/4HANA Cloud all versions