SAP Knowledge Base Article - Public

2594455 - Report built on Absence Request (Time Off) does not respect Role Based Permission (RBP) - Report Canvas

Symptom

  • You’ve created a report with Advanced Reporting based on Time Management & Absence Request.
  • When a user (e.g. a Manager) runs the report is able to see data for users which is not permissioned for in the RBP role. In fact, in this case the manager is not able to access the Time Off data for some of the users they could see in the report query.
  • In addition a second behavior is when the employee is only able to see his own data or no data at all, although he has the permissions.

Environment

  • SAP SuccessFactors HCM Suite
  • SAP SuccessFactors Workforce Analytics
  • Report Canvas - Advanced Reporting

Reproducing the Issue

  1. Create a query using the Advanced Reporting
  2. Select the Time Management object and add the respective fields from any of the available tables. For example, Absence request, EmployeeTimesheet, TimeAccount, Time Collector etc.
  3. In this example the Manager was able to report on Time Off data (Absence Request) for users which could not access through the My Employee File - Time Off portlet. 

Cause

You need to set up permissions for Time Account object & RBP to enable reporting for time accounts.

Resolution

You can apply appropriate permissions to your time accounts in reporting by enabling the role-based permissions (RBP) for time accounts object and role as below:

  1. Secure the Employee Time Object as follow:
    1. Go to the Admin Center and choose Configure Object Definitions.
    2. Choose the generic object Employee Time.
    3. Choose Take Action then Make Correction and apply these changes:
      • Make the userId field required (this is the default anyway).
      • In the security section, set Secured to Yes.
      • Choose Miscellaneous Permissions as the permission category.
      • Enter userID in RBP Subject User Field.
      • Enter endDate in Base Date Field For Blocking
        KBA1.jpg
  2. Provide permission for the Employee Time from RBP
    1. Manage Role permission – select the User role
    2. Select Permission settings then Miscellaneous Permission
    3. Employee Time & check the box for View – Edit & Import/Export
      Permission settings.png
    4. Save the role

NOTE: When such changes are made to an instance a Realms metadata refresh may be required as described in the KBAs 2279026 & 2276691

See Also

Further details are also available via the Setting Permissions for Time Account-Related Reports guide.

Keywords

ORD, Online Report Designer, Advanced Reporting, Realms, ODS, Time Offt Data, absence request, Time management, object Security , KBA , LOD-SF-ANA-ADV , Advanced Reporting (ODS) , How To

Product

SAP SuccessFactors HCM all versions ; SAP SuccessFactors Workforce Analytics all versions