SAP Knowledge Base Article - Public

2533253 - How To Set Access Restrictions For Installed Base


You have created a Business Role XYZ(XYZ represents the name of the business role) with a read and write access restriction on Installed base with (for example) Rule 04 - Access based on the Employee, Territory assignment and Service Organization of the Employee. When you now log on to the system with a user user01(user01 is the user ID) assigned to XYZ and go to the Installed Base work center you expect to see only the Installed Base where the user is part of the Involved Parties however all are showing up.


SAP Hybris Cloud for Customer

Reproducing the Issue

Prerequisite as seen in the description. The same issue can be applied to other views (Registered Products, Installation Point, etc.).

  1. Log in with the effected user.
  2. Go to the Installed Base work center.
  3. You see all Installed Bases.


You did not maintain any owner for the Installed Base (or other objects) and the system presumes the objects to be homeless/ orphaned.

We are not providing any party determination for installed base/registered products - hence there is no way to set a determination for the owner to be pulled from the account as we do not presume that the account owner will also be the Installed Base owner. This is as per requirements and not a bug and therefore is expected system behaviour.


The owner on the Installed Base has to be edited manually. We do support implicit determinations. The bill-to, ship-to and payer can be picked up from the Relationship of the Account if they are maintained there. The Service Technician is defaulted from the Account Team of the account, if maintained.

The access restriction of Installation Point and Registered Product does not work based on the Sales Org maintained in the overview facet. Here, the Sales org does not affect the RBAM authorization.

Access restriction on Installation Point is based on the following fields:

  • Employee Responsible;
  • Service technician;
  • Service technician team;
  • Sales Territory;
  • Service Territory.

The 99 - Specific Restrictions will apply only to any of the above fields. Sales Organization maintained in the Installation Point does not affect the restriction.

See Also

2438094 - Orphan Objects Still Visible After Scoping


Registered Products, Installation Point, Installed Base, Orphan Object, Access restriction , KBA , LOD-CRM-ACC , Account , How To


SAP Cloud for Customer core applications all versions ; SAP Hybris Cloud for Customer 1708