3745846 - Maintenance and Manage Security Principals permissions conflict

• Users can add and use any user as a proxy, including portal administrators, even though the Manage Proxy Relations permission is not granted in any assigned portal role.
• A portal role with Execute maintenance tasks and Manage Security Principals (Administration type) enables proxy management options.
• With only Maintenance permission, submitting a change in Portal > Maintenance > User ID Update fails with error 403 Forbidden.
• After adding Manage Security Principals to the same role, the User ID Update succeeds and proxy management capabilities become accessible.
• The behavior is reproducible across multiple environments.

• SAP Sales Performance Management
• Incentive Management

KI1H2026, COM-133233, proxy, manage proxy relations, manage security principals, maintenance permission, user id update, 403 forbidden, permissions coupling, portal role, proxy users, least privilege, administration type, authorization model, incentive management portal , KBA , CEC-SAL-COM , Incentive Management , Product Enhancement