2458518 - Advanced Reporting - Report built on Time Account does not respect Role Based Permission (RBP)

SAP Knowledge Base Article - Public

2458518 - Advanced Reporting - Report built on Time Account does not respect Role Based Permission (RBP)

Symptom

Time Account Related Reports don't respect the same permission settings as seen in BizX UI.

For example, in this case the HR Admin has RBP permission to see only the records of users from a specific location based on the set target population.

The RBP permission & restriction is applied when accessing employee data via My employee file portlet. 

When HR Admin runs the Time Account Related Reports the RBP permission & restriction is not applied and the HR Admin is able to report on Time account data for any users.

Environment

  • SAP SuccessFactors HCM Suite
  • Advanced Reporting
  • Report Canvas

Reproducing the Issue

  1. Create a query using the Advanced Reporting
  2. Select the Time Management object and add the respective fields from any of the available tables. For example, Employee Time, Time Account etc.
  3. In this example the HR Admin was able to report on Time Account data for users which could not access through the My Employee File portlet. 

Cause

You need to set up permissions for Time Account object & RBP to enable reporting for time accounts.

Resolution

You can apply appropriate permissions to your time accounts in reporting by enabling the role-based permissions (RBP) for time accounts object and role as below:
  1. Go to the Admin Center and choose Configure Object Definitions.
  2. Choose the generic object Time Account.
  3. Choose Take Action then Make Correction and apply these changes:
    • Make the userId field required (this is the default anyway).
    • In the security section, set Secured to Yes.
    • Choose Miscellaneous Permissions as the permission category.
    • Enter userID in RBP Subject User Field.
      Security.png
  4. Check that the permissions you entered match the settings you've made in the object. To do this, go to the Admin Center - Manage Business Roles - Choose the role of the user – Permissions – Miscellaneous then scroll down in the list of objects until you see Time Account. Make sure the View permission is selected for reporting, but whatever you select, it must match what you selected in the time account object.
    Misc Permissions.png

Further details are also available via the Setting Permissions for Time Account-Related Reports guide.

NOTE: When such changes are made to an instance a Realms metadata refresh may be required as described in the KBAs 2279026 &  2276691

Keywords

ORD, Online Report Designer, Advanced Reporting, Realms, ODS, Time Account Data, Time management, object Security , KBA , LOD-SF-ANA-ODS , Advanced Reporting , Problem

Product

SAP SuccessFactors HCM Core all versions ; SAP SuccessFactors Workforce Analytics all versions