3783349 - Customer Account Group Restrictions Are Not Supported for Sales Order Applications in SAP S/4HANA Cloud Public Edition

Business role restrictions are maintained for Customer Account Group with the expectation that users will only be able to create, display, change, or manage sales orders for customers belonging to authorized account groups.

Despite the configured restriction, users are still able to process sales orders for customers assigned to restricted customer account groups.

Similar expectations may also exist for restrictions based on other customer master attributes, such as Customer Authorization Group, Sales Group, or Sales Office.

SAP S/4HANA Cloud Public Edition

1. Create or copy a business role used for sales order processing.
2. Maintain a restriction for Customer Account Group within the business role.
3. Assign the business role to a business user.
4. Log on as the assigned business user.
5. Open a sales order application, such as:
   • Create Sales Orders
   • Manage Sales Orders
   • Display Sales Orders
6. Create or process a sales order for a customer belonging to a customer account group outside the intended restriction.

Actual Result

The user is able to create, display, or process the sales order.

Expected Result

The business role restriction should prevent the user from processing sales orders for customers belonging to restricted customer account groups.

This is expected system behavior.

Although Customer Account Group is available as a restriction field in business role maintenance, it is not evaluated by the Sales Order applications during runtime authorization checks. The availability of a restriction field within a business role does not imply that all applications consume that restriction. Restriction types are evaluated only by applications that explicitly support them.

The Sales Order applications currently do not support restricting sales document processing based on Customer Account Group. The same design principle applies to other customer master attributes that are not supported as runtime restriction types for Sales Order applications.

Therefore, this behavior is not caused by an authorization error, incorrect configuration, or a software defect.

Restricting sales order processing based on Customer Account Group is not supported in the current standard functionality of SAP S/4HANA Cloud Public Edition.

If the available standard organizational restrictions (for example, Sales Organization, Distribution Channel, or Division where supported) do not satisfy the business requirement, this represents a functional gap rather than an implementation issue.

Customers requiring this capability may consider the following options:

• Review whether the standard authorization restriction types supported by the relevant sales business catalogs satisfy the business requirement.
• Evaluate whether standard business processes, such as customer sales order blocking where applicable, can achieve the desired outcome.
• Engage an SAP implementation partner or consulting team to assess alternative business process designs or available extensibility options.
• Submit an enhancement request through the SAP Customer Influence Portal for consideration in future releases.

• Refer to: Sales Order app: customer blocks for sales orders
• Refer to: 3613045 - "Partners from account group &1 are not permitted for partner function &2" in S/4HANA Cloud Public Edition
• Refer to: 2706322 - What is Support – What is Consulting: Cloud Solutions
• Refer to: 2963059 - Customer Influence Portal

SAP S/4HANA Cloud Public Edition, Customer Account Group, KTOKD, Business Role, Maintain Business Roles, Authorization Restriction, Customer Restriction, Business Role Restriction Not Working, Sales Order, Sales Order Creation Restriction, Create Sales Orders App, Manage Sales Orders, Display Sales Orders, Order Not Blocked, Customer Authorization Group, BUPA_GRP, Sales Group Restriction, Sales Office Restriction, Runtime Authorization, Restriction Type, Sales Order Block Reason, Customer Block, Partner Function Restriction, VA01, Expected System Behavior, Missing Functionality, Feature Request, Customer Influence Portal, , KBA , SD-SLS-2CL , Sales (Public Cloud) , Problem