Symptom
- The new directory search does not respect the target population permissions.
- When users search for custom fields, they can view search results for employees outside their target population.
- This behavior allows employees to access information they do not have permission to view, revealing sensitive data.
Environment
SAP SuccessFactors Employee Central - Employee Directory Search
Reproducing the Issue
- Access the directory search as a regular employee.
- Search for a value.
- Observe that multiple employees appear in the search results, even if the access user does not have permission to see those information on the employees' profile.
Resolution
The issue has been confirmed as a defect and will be addressed in the 1H2026 Release.
See Also
- Directory Search | SAP Help Portal
- Permissions for Directory Search | SAP Help Portal
- KBA 2916660 - Overview of new Directory Search
- KBA 2751679 - Custom Fields in Directory Search
Keywords
new directory search, target population, role-based permissions, RBP, search results, permissions issue, employee profile, target population is not respected , KBA , LOD-SF-EP-DIR , Employee Directory Search , LOD-SF-PLT-SRH , Search , Known Error
Product
SAP SuccessFactors Employee Central all versions
SAP Knowledge Base Article - Public