SAP Knowledge Base Article - Public

2684856 - Access Restrictions for Employee Not Working


User ABC (ABC represents the user ID) is able to edit employees even though he is assigned to the business role DEF (DEF represents the business role ID) which has maintained write access for Employees as No Access.


SAP Cloud for Customer

Reproducing the Issue

  1. Login as the user ABC.
  2. Go to the Administrator work center.
  3. Go to the Users view.
  4. Go to the Employees sub view.
  5. Select the employee XYZ (XYZ represents the employee name).
  6. Press Edit.
  7. Perform some change.
  8. Save.
  9. The system allows to save the changes, even with no write access maintained to the business role DEF.


The user has unrestricted write access to the General Settings view in Administrator work center.


 This is the expected system behavior.

If you need to have unrestricted write access to the General Settings view and no access to edit Employees, you may contact your implementation manager to help with such request or approach directly the SAP Cloud Service Center (

Note: The services of the SAP Cloud Service Center will be charged as packaged services based on fixed prices.

An alternative option may be to check the SAP Hybris Cloud for Customer Ideas Forum to submit an idea:


 Employee, Access Restrictions, General Settings, Edit , KBA , LOD-CRM-EMP , Employee , How To


SAP Cloud for Customer add-ins all versions