SAP Knowledge Base Article - Public

2696370 - 'No Authorization Granted Based on Account’s Access (Limit of 1.000 Exceeded)'

Symptom

You are using a valid Access Restriction based on Territory and Account but the logon user cannot see Appointments with the correct Territory and Account.

Environment

SAP Cloud for Customer

Reproducing the Issue

Prerequisite: a valid Account based Access Restriction, eg 1016 with Restriction Rule 10 for the Business Role of the logon user. Further, an Appointment XYZ (XYZ is the Appointment name) with the corresponding territory and account for the logon user.

  1. Go to the Activities workcenter.
  2. Go to the Appointments view.

Result: You don't have access to Appointment XYZ despite the correct restriction. Further, you see the information message 'No authorization granted based on account’s access (limit of 1.000 exceeded)'.

Cause

The user is directly or indirectly responsible for more than 1000 accounts; there is a hardcoded limit in the system of 1000 to optimize performance. Once this limit is reached, restriction rules cannot be calculated.

Resolution

This rule only works if the user is directly/indirectly responsible for less than 1000 accounts. This is the designed system behaviour.

Keywords

access restriction, appointment, account, territory, employee , KBA , LOD-CRM-ACT , Activities , LOD-CRM-ACC , Account , Problem

Product

SAP Cloud for Customer all versions