Symptom
Although the user is restricted to a specific plant in the assigned business role, the Material Document Overview app (F1077) shows material documents from additional plants that are not in the intended scope.
Environment
SAP S/4HANA Cloud Public Edition
Reproducing the Issue
- Login the tenant as the issued user.
- Go to the Material Document Overview app (F1077).
- Input a plant code outside the user's restriction as a filter. (e.g., Plant ABC; ABC represents the plant code).
- Observe that material documents for Plant ABC are also displayed.
Cause
The system merges restriction values from all assigned business roles at runtime. If the issued user has other roles that include additional plant restriction values, those plants become accessible regardless of which role grants the app access.
Resolution
- Go to the Maintain Business Roles app.
- Review all business roles assigned to the issued user.
- Identify the issued roles that contain Plant restriction values beyond the intended scope.
- Remove the issued roles or adjust the Plant restriction values to include only the intended plants.
See Also
Keywords
material document overview, F1077, plant restriction, authorization, iam, business role, merged restrictions, combined authorization profile, data access, inventory, goods movement, visibility across plants, public cloud , KBA , MM-IM-VDM-SGM-2CL , VDM Stock and Goods Movements (Public Cloud) , Problem
SAP Knowledge Base Article - Public