SAP Knowledge Base Article - Public

3620029 - Exclude granted permission to self not working as expected

Symptom

  • Exclude granted permission to self function not working as expected.
  • Users with multiple assignments are granted permissions despite the exclusion rule.
  • User is able to view specific area, even though they have the exclude permission granted.

Environment

SAP SuccessFactors HCM Suite 

Reproducing the Issue

  1. Proxy as the affected user.
  2. Navigate to Area in question 
  3. Notice that the area is visible and accessible by the user despite the exclusion rule.

Cause

Expected Behavior

Resolution

  • The feature "Exclude granted users from having the same access to themselves" only works for specific employment.  If a person has multiple employments, it will only exclude the employment set as access groups/users in the permission roles.
  • In the next release (b2511), the "Exclude By Person" option will be supported. When enabled, all employments of a person (e.g., GA/CE) will be excluded from the access groups/users for permission roles.
  • Refer to the SAP SuccessFactors What's New for updates on the Release.

See Also

Keywords

exclude granted permission, role-based permissions, multiple assignments, sap successfactors, permission exclusion, employment, b2511 release, view/edit access, exclude by person, LOD-SF-PLT-RBP, 2H2025 , KBA , LOD-SF-PLT-RBP , Role Based Permissions , Problem

Product

SAP SuccessFactors HCM Core all versions