Symptom
A business role has been created with restrictions based on "Sales Office" and/or "Sales Group". However, sales documents with other "Sales Office" and/or "Sales Group" can still be seen by the business user (assigned with the business role) in sales apps like "VA03 - Display Sales Orders", "Manage Sales Orders", "Manage Sales Orders - Version 2", etc.
Environment
SAP S/4HANA Cloud Public Edition
Cause
This is the current system behaviour.
In the comprised business role through some non-SD business catalog the restriction types for "Sales Office" and "Sales Group" are populated. However, there is no restriction type available for "Sales Office" or "Sales Group" that would allow to define roles restricting access to sales documents using these two fields. Although the restriction types mentioned above can be maintained, they do not have an effect when working with the sales apps, as the restriction type in use is related to other business catalogs instead of SD.
In the current sales document processing, logics are designed only for these two authorization objects: order type and sales area. In other words, the standard authorization check for sales documents can only base on the order type and sales area.
Resolution
- Regarding "creation" and "modification", consider utilizing the BAdI SD_SLS_CHECK_BEFORE_SAVE to check the fields "SALESDOCUMENT-SALESOFFICE" and "SALESDOCUMENT-SALESGROUP" at header level and raise messages depending on the conditions specified. Refer to the documentation and example code in the "Custom Logic" app for more details of this BAdI. Regarding the detailed custom logic, discuss further with your local consultant/developers, as per the KBA 2706322 - What is Support – What is Consulting: Cloud Solutions.
- Vote for and comment under the already existing feature request Request ID 347869 - Add sales group and sales office as authorization object.
See Also
Keywords
Sales, Sales office, Sales group, restriction, Authorization, Authorisation, Object, SD, S/4HANA Cloud Public Edition, Display sales orders, Sales order, Manage sales orders, Restrict, Sales document , KBA , SD-SLS-2CL , Sales (Public Cloud) , Problem
SAP Knowledge Base Article - Public