SAP Knowledge Base Article - Public

3651883 - How to restrict "Target Criteria" for an MDF object - OData API

Symptom

You are using OData API to query a (secured) MDF object.

You would like to restrict the API response with specific criteria (such as getting records only from a certain department).

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental." 

Environment

SAP SuccessFactors HCM

  • OData API

Resolution

  1. Navigate to "Admin Center" -> "Manage Permission Roles"

  2. Make sure to disable "Admin access to MDF OData API" permission, as it will bypass all restrictions and return all data.
  3. "Add Role Assignment" -> "Define Target Criteria" -> Find the MDF object (for example FODepartment here)
    Set the condition under "Restrict Target Criteria to". Then the API query will only return records based on this target criteria.

Keywords

MDF API, metadata framework, data restriction, access, hide, limit, limitation, permission setting , KBA , LOD-SF-INT-MDF , Metadata Framework API (MDF) , LOD-SF-INT-ODATA , OData API Framework , Problem

Product

SAP SuccessFactors HCM Core 2505