SAP Knowledge Base Article - Public

2088175 - Manage Users: How to lock down an instance for some users but not all - Platform

Symptom

  • If a user is not in the default user group, they will not be able to use the application. This document explains how an administrator can:
     
    1. Lock down an instance to all users, or for some users but not all.
       
    2. Add one user back to the default user group.
       
    3. Remove one user from the system (default user group).

Environment

  • BizX Platform

Resolution

Non-RBP Instance

  • Follow the following steps to lock down the system:
  1. Go to Admin Tools > Default User Group Assignment.
  2. Click on the link "Assign individual users to the Default User Group"
  3. Click Search Users
  4. All the users in system will appear, click Select All.
  5. Remove the check from the users that will still have access to the system as well as the Success Factors admin login and click Remove from Default User Group
  6. You should receive a successful message (in green) near the top.
  • WARNING! If you are removing everyone, locking the system to everyone, be sure you add yourself back to the default user group BEFORE you log out of the system. Failure to add yourself to the default user group, then logging out, could potentially result in no-one being able to login. If this occurs, please contact SuccessFactors Customer Success.
     
     
  • Adding one user back to the system:
  1. Go to Admin Tools > Default User Group Assignment
  2. Click on the link "Assign individual users to the Default User Group"
  3. Enter the search criteria for the appropriate user and click Search Users
  4. The user should have a red X under the Default User Group Status column, check the checkbox next to the user to activate and click Assign to Default User Group
  5. You should receive a successful message (in green) near the top.
     
  • Remove one user from the system:
  1. Go to Admin Tools > Default User Group Assignment
  2. Click on the link "Assign individual users to the Default User Group"
  3. Enter the search criteria for the appropriate user and click Search Users
  4. The user should have a green check under the Default User Group Status column, check the checkbox next to the user to deactivate and click Remove from Default User Group
  5. You should receive a successful message (in green) near the top.

 

RBP Instance

  •  To control access to SuccessFactors with RBP implementation, you need to update who has access to General User Permission-->User Login.
     
  • Create a permission group with just the users you want access (Manage Security--->
    Manage Permission Groups).
    Make sure it matches exactly how the permission group was setup for everyone.
    Then within the permission role (Manage Security--->Manage Permission Roles), edit who was granted this permission, >
    add the permission group you created,
    and make the current group granted inactive.

Keywords

KBA , LOD-SF-PLT , Foundational Capabilities & Tools , How To

Product

SAP SuccessFactors HCM Core all versions