3753422 - Users Can Edit Sales Orders Without Being Assigned to the CRM Sales Orders Work Center

SAP Business ByDesign

• 1. Navigate to Application and User Management.
  2. Select the Business Users view.
  3. Open the affected business user.
  4. Choose Edit and select Access Rights and verify that the user is assigned two business roles (Finance business role and a Project Management business role).
  5. Log on as the affected business user.
  6. Navigate to Customer Invoicing work center.
  7. Select the Sales Orders view.
  8. Open an existing sales order and choose Edit, and verify that the sales order can be edited and saved successfully.
  9. Log on as an administrator, open the same business user, and remove only the Finance business role. Save the changes.
  10. Log on again as the affected business user, open the same sales order, and verify that the Edit action is no longer available or that the sales order cannot be edited.
  11. Log on as an administrator and reassign the Finance business role to the business user and Save the changes.
  12. Log on again as the affected business user and open the same sales order and verify that it can once again be edited and saved successfully.

The business user is assigned two business roles:

1. Finance role
2. Project Management role

The Project Management business role provides access to the Sales Orders view. However, it is assigned Restriction Rule 99 for the CRM work center. Restriction Rule 99 alone does not provide a valid organizational assignment. As a result, although the user can access the Sales Orders view, the required authorization to edit sales orders cannot be determined.

When the Finance business role is also assigned, it provides a valid organizational assignment (for example, company, organizational unit, or business residence). This organizational assignment fulfills the authorization requirements for editing sales orders. Consequently, the restriction imposed by Restriction Rule 99 is effectively resolved, allowing the user to edit and save sales orders.

This is the expected system behavior when Restriction Rule 99 is assigned.

To allow a business user to edit sales orders, ensure that the user is assigned a business role that provides the required organizational assignment in addition to the role that grants access to the Sales Orders view.

If only a business role with Restriction Rule 99 is assigned and no valid organizational assignment exists, the user will not have the required authorization to edit sales orders. 

Sales Orders; CRM Sales Orders; Business User; Business Role; Finance Business Role; Project Management Business Role; Restriction Rule 99; Access Rights; Authorization; Edit Sales Order; Organizational Assignment; CRM Work Center; Sales Orders Work Center; Customer Invoicing; Work Center Assignment; Business User Access; Access Restrictions; Edit Authorization , KBA , AP-SLO-SO , Sales Order , How To