3744239 - Admins can create user groups with disallowed security domains after removing 'GROUP' domain type

Admins are able to create user groups for domain which they should not have access to; no validation error is shown The expected error: The security domain ID does not exist or is not of the correct type: "GROUP", does not appear.

SAP SuccessFactors Learning

1. In Security Domain configuration, open a security domain and remove the 'GROUP' entry from Security Domain Types.
2. Go to Learning Administration > People > User Groups and create a new user group or edit an existing one.
3. In the user group’s Security Domain field, search/select the security domain updated in step 1 and save.
4. Observe that the save succeeds even though the domain no longer includes the 'GROUP' type; the expected validation would be: "The security domain ID does not exist or is not of the correct type: GROUP".

Product Engineering is investigating a solution.

Click on star to bookmark this article to receive updates about this issue. For more information about updates from subscribed KBAs, you can refer to the KB Article 2171560 - How to be notified of new or updated SAP Notes or KBAs.

Workaround

No workaround is available.

• SAP SuccessFactors Product Release & Road Map Information
• SAP SuccessFactors Patches Knowledge Base
• KB Article 2171560 - How to be notified of new or updated SAP Notes or KBAs

security domain type, group, user groups, Domain_User_Group, validation error, access restriction, user group creation, learning administration, security domain, domain types, domain configuration, restriction not enforced, remove group type, save succeeds, expected validation, LRN-207455 , KBA , LOD-SF-LMS-WOR , Roles & Workflows , Known Error