3637336 - Access Restrictions For Accounts is Not Working as Expected

You have restricted read/write access on certain company(account) for Accounts for the user, but the user can still access to Account which he/she has no access rights.

SAP Business ByDesign

1. Go to Application and User Management work center.
2. Go to Business Users view.
3. Select the user and Edit Access Rights.
4. Navigate to Access Restrictions tab.
5. Access is restricted for Account work center view on certain company(account).
6. Login system with the user ID.
7. The user can access to company(account) which he/she has no access.

This behavior is due to the access restriction being set with Access Context 1010 – Employee. It is important to note that Access Context 1010 enforces restrictions based solely on the Employee Responsible field. Even if organizational or company assignments exist, they are not considered in this access context. Hence if there is no Employee Responsible is maintained for the company(account), the system treats these records as unrestricted for users with access context 1010, allowing the users to access them.

Follow the below steps to maintain the Employee Responsible for the company(account).Then it wont be displaying under All Accounts view.

1. Go to the Account Management Work center
2. Go to the Accounts view 
3. View the All Accounts 
4. Search for the Account ID to maintain contact responsibility 
5. Select on Edit 
6. Go to Contacts tab
7. Navigate to responsibilities tab
8. Select on Add Row 
9. Maintain the Employee Responsible  

KBA 3234125 - Account Restriction is not Working for Employee 

BPM Accounts, Account Restrictions, Employee Responsible , KBA , SRD-CC-IAM , Identity & Access Management , SRD-CRM-ACC , Account Management , Problem