Symptom
- SuccessFactors admin wants to check why an user can see/edit/delete information of another user, despite setting permissions not to do so.
- SuccessFactors admin wants to validate permissions granted to specific users for a specific permission and a target.
Environment
SAP SuccessFactors HCM Suite
Resolution
With RBP Troubleshooting tool, users/admins can search the roles granted to specific users for a specific permission and a target user. When some users get some permissions on some target users that should not be granted, the administrator can use this tool to find which role grants the permission so they can update the permission settings.
How to use this feature. Please note that the examples below refer to a user X which can see Birthday of user Y:
Go to RBP Troubleshooting page
- Select Target Population Search tab
- In "Search Criteria":
- In "Access User 1" field, search for the user which has the permission granted - user X from the given example
- In "Permission" field, search for the permission that has been granted to this user in a new window - Employee Profile > Date Of Birth(View) permission from the given example
- In "Target User" field, search for the user which information can be seen/edited/deleted - user Y from the example above from the given example
- Click on Search
The Results will display Role ID, Role Name and Actions as View Role Assignments.
NOTE: Even if there a role that restricts an user to have permission over another, if there is another role which allows users such permissions, this rule will prevail.
See Also
- KBA 2229272 - Checking User Permissions (for example Report Permission) via User Role Search
- KBA 2321200 - Troubleshooting SAP SuccessFactors Platform Role-Based Permission (RBP) Issues
- KBA 2088818 - How to view permissions and groups assigned to users via RBP Troubleshooting feature?
- KBA 2088769 - Checking the Audit Trail (Change History) of RBP Permission Roles and Groups
- Help Portal - Role-Based Permissions
- Help Portal - RBP Troubleshooting Tool Supports Target Population Search
- Help Portal - Replacement of User Role Search with RBP Troubleshooting
Keywords
sap successfactors, role-based permissions, permission overlap, troubleshooting rbp, role configuration, sap sf rbp issues, Target Population Search , KBA , LOD-SF-PLT-RBP , Role Based Permissions , How To
SAP Knowledge Base Article - Public