SAP Knowledge Base Article - Public

1881710 - Unable to change the parameters for SAP delivered security policy.

Symptom

You want to change the parameters for SAP delivered Security Policy S_BUSINESS_USER.

Reproducing the Issue

Security Policy in the ByDesign system can be checked by a Key user following the below steps :

  1. Go to Application and User Management work center.
  2. Select the Common Task -> Edit Security Policies.
  3. Here you can find the SAP delivered security policy with parameters already defined that is S_BUSINESS_USER.
  4. Key users cannot edit the Parameters for this policy.

Cause

S_BUSINESS_USER is a SAP delivered Security Policy for Business Users existing in the system with SAP provided parameters. No changes are permitted to any user.

Resolution

Key users can create a new Security Policy with a different Policy name and Description using the Add Row option in Security Policy screen :

  1. Go to Application and User Management work center
  2. Select the Common Task -> Edit Security Policies.
  3. Click on button Add Row and enter the mandatory fields like Policy ID, Policy Name. For example C_BUSINESS_USER.
  4. Now you can edit the Parameters for this Policy and save it for the purpose of users assignment.

If you click the button Default for this new policy then it will be automatically assigned to all the new created users. To assign the Policy to existing users in the system , you need to edit each users attributes in the Access Rights screen for saving the changes.

Keywords

KBA , security , iam , seurity policy , SRD-CC , Cross Components , How To

Product

SAP Business ByDesign all versions ; SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions