Symptom
When adding a sensitive field to a Canvas Advanced report query, error "Invalid GDPR for sensitive column......." comes up.
Environment
SAP SuccessFactors HCM Suite
Cause
In some cases, this is caused by improper read auditing configuration that, even when corrected, may take up to 24h to have metadata synchronized as per SAP Help Portal Article Read Audit in Advanced Reports (Realms):
- When a field is marked as sensitive in the source modules, this metadata needs to be synchronized to the Advanced Reporting solution. This synchronization can take up to 24 hours. Allow a day between marking a field as sensitive and validating that the field is being logged when accessed via advanced reporting.
In other cases, it is possible Read Auditing is not supported in Canvas Advanced reporting for the source module/schema this field is configured in (I.e. Performance For 9 Box). And there are no plans to enhance the Canvas Advanced Reports tool in this regard.
Resolution
SAP's recommendation is to utilize Story reports as your go-to reporting solution in SuccessFactors as, among other reasons, read auditing for sensitive fields is natively supported.
See Also
KBA 2877303 - Quick Guide to Enable Story Reports in SuccessFactors Reporting
Keywords
Sensitive, error, gdpr, canvas report, advanced, query, column. , KBA , LOD-SF-ANA-ADV , Advanced Reporting (ODS) , Product Enhancement
SAP Knowledge Base Article - Public