SAP Knowledge Base Article - Public

2982860 - Creation of Objects Possible Even Without Write Access For Accounts

Symptom

It is possible to create opportunities for accounts, a user has no write-access for.

Environment

SAP Cloud for Customer

Cause

As long as the user has access to the account (for example read-access), the user can create objects, for example an opportunity, for this account.
We refer to this as a "forward scenario". The opportunity will then not be accessible for the user anymore, once it is touched by another user, if restriction rules are applicable.

So in general this implies that you can also create objects for sales areas you are not responsible for.

Resolution

It is the expected current system behaviour that a user can create objects for sales areas they are not responsible for, if they have access to accounts from there.

See Also

Blog: Access Control Management: Access restrictions explained – Restriction Rules

Keywords

possible to create, can create without access, Access Restriction 1015 not working , KBA , LOD-CRM-OPP , Opportunity Management , How To

Product

SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions