SAP Knowledge Base Article - Public

2879129 - How to restrict data access in Integration Center - SuccessFactors Integrations

Symptom

As a system admin, you need to grant an user or a group (eg. development or IT team) full permission to use Integration Center (IC) and build integrations, but don't want them to have access to sensitive employee data (eg. pay components and salary).

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Environment

  • SAP SuccessFactors HXM Suite
    • Integrations
      • Integration Center

Reproducing the Issue

  1. Ensure that you have IC fully enabled to a permission role (KBA 2209164 - How to enable integration center in Successfactors System? - Integration).
  2. Any user assigned to that permission role will have full access to all employee data via API calls or via IC, including sensitive data such as salary (see screenshot below).

    IC_data.png

Cause

  • IC retrieves data via API calls.
  • Employee Central API permissions will override other permission settings, granting access to all employee data.

Resolution

Follow the steps below to restrict data access in IC:

  1. Login to a SF admin account
  2. Navigate to Admin Center -> Manage Permission Roles -> Select the role which gives IC access

    permission_roles.png

  3. Click on "Permission..."

    permissions.png

  4. Now remove all permissions about OData and SOAP API under "Employee Central API" section

    ec_api_permissions.png

  5. Manually configure which employee data fields should be available under "Employee Data" section

    employee_data_permissions.png

    From now on, only employee data fields which were selected in the permissions will be accessible (all other fields will not be shown in the UI nor retrieved by any integration, even if selected in IC).

Keywords

IC, integration center, access, restriction, data, permission , KBA , LOD-SF-INT-INC , Integration Center , LOD-SF-INT , Integrations , How To

Product

SAP SuccessFactors HXM Suite all versions