Symptom
- User A belongs to Company A, and is a manager
- User C belongs to Company C, is a normal terminated employee
- In permission role, user A could view his/her direct report's profile and all level down.
- However, user A could view user C's profile
Environment
SAP Successfactors Employee Central
- Permission
Cause
User B's manager was User C when user B was terminated. Later on User C was transferred to Company A and became a direct report of User A.
The system evaluates the current reporting hierarchy at runtime; because the inactive user's manager relationship persisted and that manager is now within the viewer's hierarchy, access is granted via inherited reporting levels.
Resolution
Update User B's EP manager to NO_MANAGER via Import Employee Data<Basic Import.
Details please refer to 2618227 - Updating user information of an inactive user through Basic Import
See Also
Keywords
permission, target population, direct report, level down, manager, people profile, inactive, reporting hierarchy, NO_MANAGER , KBA , LOD-SF-EC-RBP , Roles & Permissions (EC Core only) , How To
SAP Knowledge Base Article - Public