SAP Knowledge Base Article - Public

3486696 - How to Restrict field level permissions for getWorkflowPendingData - OData API


You are using Function Import "getWorkflowPendingData" to query the pending data in a workflow.

You would like to know whether you can restrict field level permissions for "getWorkflowPendingData".

You tried to disable the field level permission of the API user, but the field still appears in the API response.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."


SAP SuccessFactors HCM

  • OData API


When you configure the workflow, "Respect Permission" should be set to "Yes". Otherwise it will not check the field level permissions.

Pasted image.png


Go to "Manage Organization, Pay and Job Structures" -> Find the workflow -> Configure "Respect Permission" to "Yes".

After that, for the initiated workflow, "getWorkflowPendingData" will respect the field level permission of the API user.

If API user does not have permissions for specific fields, those fields should not appear in the API response.

See Also

2316798 - How to restrict API access to specific Employee Central Entities and Fields


SF, Success Factors, property, entity, changed, refer, result, response payload, hide, bypass, RBP , KBA , LOD-SF-INT-ODATA , OData API Framework , Problem


SAP SuccessFactors HCM Core 2405