SAP Knowledge Base Article - Public

2741306 - Restriction Rule 11 and 12 are not meant to be used for Contacts and Accounts


You are using restriction rule 11 and 12 to restrict Accounts and Contacts. However, you don't get the correct results.


SAP Cloud for Customer

Reproducing the Issue

  1. Go to the Administration work centre.
  2. In the Overview facet, click on Business Users.
  3. In the Business Role assignment facet, click on assign a role to your user.
  4. Open the role.
  5. In the Access restrictions facet, restrict the Accounts and Contacts with read access using the access restriction 11 [Employee, Account (Account team)] or 12 [Employee, Account (Account and Territory Team)].
  6. Save the changes.
  7. Log in with the affected user.
  8. Go to the Customer work center.
  9. Go to the Accounts or Contacts view.

Expected result: You expect the accounts and contacts to be restricted according to the account team and the territory team (in case of rule 12).


Restriction Rule 11 and 12 are not meant to be used for Business Partners (which includes Accounts and Contacts). This recommendation is also written in this blog in the SAP Portal. Note: BUPA stands for Business Partners.


Instead, you can use Rule 2 if you wish your users to be authorized to see all the contacts/accounts where the logged in user is part of the account team OR part of the territory team.

See Also

Access Control Management: Access restrictions explained – Restriction Rules


account, contact, territory team, account team, access rights, access restriction, business role, , KBA , LOD-CRM-ACC , Account , LOD-CRM-PCN , Partner Contact , How To


SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions