Symptom
- A business rule does not behave as expected: a condition evaluates to FALSE although the configured data conditions are met.
- The Business Rule Execution Log shows the function isUserInPermissionGroup returning FALSE for the current user and the specified permission group.
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental
Environment
- SAP SuccessFactors Employee Central
- Job Info Business Rules
Reproducing the Issue
- Edit the target user’s Employment Information > Job Information.
- Based on business rule setting, "is user in permission group" is doing the validaiton in the If condition part.
- Even target user is in the permission group, the business rule indicates the user is not in the dedicated permission group.
Cause
A trailing space at the end of the permission group name was saved in the database. The UI trims spaces when viewing the name, but the rule function isUserInPermissionGroup requires an exact, character-for-character match. The mismatch (group name with trailing space vs. rule parameter without it) causes the function to return FALSE.
Resolution
- Edit the permission group name to remove any leading or trailing spaces, then save. Re-enter the desired name carefully to ensure no trailing spaces remain.
- Alternatively, update the business rule so the group name parameter exactly matches the saved permission group name (including any trailing space, if present).
- If issues persist, delete and recreate the permission group using the intended name without trailing spaces, then update the business rule to reference the new group.
- Reproduce the transaction and verify in the Business Rule Execution Log that isUserInPermissionGroup now returns TRUE when appropriate.
- Optionally, run an RBP refresh job or perform a manual membership refresh (for example, temporarily add and remove a user from the group), then retest.
To identify whether there is a space at the end of group name or not, except editing the permission group and check, you can use data inspector to check:
Data Inspector>TARGET_USER_GROUP> search for Users Group Name, see whether you can extract the permission group data or not. Then add a space at the end of the group name, then search again.
See Also
Keywords
isUserInPermissionGroup, is user in permission group, permission group, trailing space, whitespace, exact match, group name mismatch, business rule, workflow started, rule evaluates false, rule execution log, employee central, job information, rbp, permission group validation , KBA , LOD-SF-EC-JOB-RUL , Job Info Business Rules , LOD-SF-PLT-RBP , Role Based Permissions , How To
Product
Attachments
| Pasted image.png |
SAP Knowledge Base Article - Public