SAP Knowledge Base Article - Public

3457861 - Role-Based Permissions- The Latest Role-Based Permissions

Symptom

  • What's new in the 1H 2022 release related to Role-Based Permissions Enhancement ?
  • What is the Latest Role-Based Permissions and how it looks?
  • What's new in the 1H 2023 release related to Role-Based Permissions Enhancement ?

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Environment

SAP SuccessFactors HCM Suite

Reproducing the Issue

Steps to reproduce : 

Login to instance-> Admin Center->  Manage Permission Roles -> you can see the new button "Switch to the Latest Role-Based Permissions".

Prerequisites:
User should have RBP admin rights 

Resolution

What's new starting the 1H 2022 release related to Role-Based Permissions Enhancement ?

The latest Role-Based Permissions is the newest version of the RBP experience. 

As an RBP administrator, starting 1H 2022 use the newest version of the RBP experience, the latest Role-Based Permissions, under Admin Center->  Manage Permission Roles -> Switch to the Latest Role-Based Permissions.

In addition to a new look and feel, the latest version introduces the new concept of a role assignment. Role assignment defines the relationship between the access user and its target population within the role.

1.Login to instance-> Admin Center-> Manage Permission Roles -> Click on "Switch to the Latest Role-Based Permissions".

2. You get the new Look and Feel of the latest version of Role-Based permissions. Click on “Create “at the right-hand panel of the window.

3. Starting You can add the basic information for the role that you are creating.

  • Name of the Role and the description
  • User type is Employee - while creating a role you get an option to select user type as: “Employee”.

Please note that In the Legacy RBP, we will support all the external users, in group and role. But in the Latest RBP, we do not support external users in B2205 release, this will be supported in the future. So here it just shows “Employee” as User Type.

Note : "RBP-only" indicates that the role is only accessible to RBP administrators for permissions-related features. Other features such as home page can’t reuse this role.

4. Next step is to add the permissions for the role that you are creating. This is the new look & feel in 1H 2022 release. Please specify what permissions users of this role should have and click on next.

5. Preview gives you the overall view of the configurations you have done to double-check the information that you have defined and to save them. You will receive a successful pop-up message stating that you have created a permission role and to continue assigning this role. Click on yes to assign a role.

6. Starting 1H 2022 we are performing Role Assignments to the user that was created. Update the Basic Information such as

  • Name:
  • Description:
  • Target population user type as: “Employee”
  • Status (if active or inactive):

and hit the Next button.

7. Grant access or assign role to user or group of users with conditions. Access can be given to Employee, HR Managers, Managers etc.

You can also select a standard group and grant the same access to managers (level up) and click on next.

8. Next step is to define a target population for the Role Assignment. You can choose Everyone or again you can choose the standard groups from the list, and you make use of the option: “Exclude granted users from having the same access to themselves.

9. Preview gives you the overall view of the configurations that you have done to double check the information that you have defined and to save them and click on save.

10. You are in the page of viewing the Role that you have created. In the latest Role-Based Permissions, the assignment name, description, and the last modified fields of the role assignment is displayed newly.

11. Switch back to Legacy Role-Based permissions with a single click.

What's new starting the 1H 2023 release related to Role-Based Permissions Enhancement ?

 

Bulk Activating and Deactivating Role Assignments

  1. Go to Admin Center  Manage Permission Roles.
  2. Choose Switch to the Latest Role-Based Permissions. > The latest Manage Permission Roles page displays.
  3. Choose a permission role. > The Permissions and Assignments tabs display.
  4. Go to the Assignments tab. > The assignment list of the permission role shows.
  5. Select the role assignments you want to activate or deactivate.
  6. Choose Activate or Deactivate.
 
Note: You can select up to 30 role assignments. This limit is to ensure optimal system performance, especially in systems that have enabled double-confirmation messages for large-size permission role or permission group changes. See Enabling Double-Confirmation Messages for Large-Size Permission Changes in Related Information.
 
 

 

Search, Sort, and Filter Role Assignments

Starting 1H 2023, you can differentiate permission roles and role assignments by their IDs (notice in above screenshot the column ID). The IDs are system-generated serial numbers according to the creation time of the permission roles and role assignments. They’re more accurate than names in differentiating permission roles and role assignments.

Starting 1H 2023, You see an ID column in below admin pages:
  • The Manage Permission Roles page in the latest Role-Based Permissions
  • The Assignments tab of a permission role in the latest Role-Based Permissions

You can use these immutable identifiers to audit changes to permission roles and role assignments in the future.

1H 2024 Release updates, Latest Role-Based Permissions Supports External User Types in Permission Roles–

In the latest Role-Based Permissions (RBP), RBP administrators can now configure permission roles for external users.​

When RBP administrators create a permission role, they can now choose from the following three user types: Employee, External Onboarding User, and External Learner. Previously, only Employee user type was supported.​

In the User Type drop down, you can now see three options.​

Previously, there was only the Employee option.

Help guide :  Link 

See Also

Keywords

sf, sfsf , sf sf, SuccessFactors, SuccessFactor, Success, Factor, bizx, home page , KBA , LOD-SF-PLT ,LOD-SF-PLT-RBP , Platform Foundational Capabilities , How To, Latest Role-Based Permissions , Manage Permission Roles, Latest Role Based Permissions, permission role ID, role assignment ID, audit changes to permission roles, audit changes to role assignments , KBA , LOD-SF-PLT-RBP , Role Based Permissions , Product Enhancement

Product

SAP SuccessFactors HXM Suite 2205