3788638 - DCD approval hierarchy allows non-assigned users to act on steps; restriction per level not enforced - SAP S/4HANA Cloud Public Edition

• A multi-level approval hierarchy for documented credit decisions is configured and displayed in the Approval Hierarchy tab; notifications are sent to assigned approvers.
• Any user with access to the Manage Documented Credit Decision app can perform the Release action on a step assigned to a different approver; the action is not restricted to the level’s assigned approver.
• The approval log can show a step completed by a user different from the approver assigned to that level.
• Warning during configuration: "UKM_S_DCD_APPRL_HR_RESULT is not part of the allowlist".
• Reported message: "no workflow being implemented".

• Product: SAP S/4HANA Cloud Public Edition
• Credit Management

1. Configure a multi-level approval hierarchy for documented credit decisions in the Manage Credit Management Rules app.
2. Open a blocked document that generates a documented credit decision and review the Approval Hierarchy tab.
3. Sign in with a user who has access to the Manage Documented Credit Decision app but is not the assigned approver for a pending level.
4. Perform Release (or Reject/Recheck) on the step assigned to a different approver.
5. Observe that the system allows the action and records the step completion by the non-assigned user.

1. Create a custom business role from the template business role SAP_BR_CREDIT_CONTROLLER.
2. In the Z_SAP_BR_CREDIT_CONTROLLER custom is created with a write access as "No Access".
3. Change the Write access to 'Restricted' to provide the relevant authorization.

refer to: how to overrule the approval process (help portal)

3498011 - Release Blocked Documented Credit Decision without authorization

documented credit decision, dcd, approval hierarchy, approver restriction, release action, manage documented credit decision app, credit controller, super user, overrule approval, authorization, multi-level approval, approval log, UKM_S_DCD_APPRL_HR_RESULT, allow list warning, workflow not implemented , KBA , FIN-FSCM-CR-2CL , Credit Management (Public Cloud) , Problem