Limit permissions to see fields in Manage Data - EC

[former_member27731]

Hello all,

Just wondering if anyone out there has workarounds to limit permissions for "Manage Data" feature. What I mean is to setup a custom configuration that when opening Manage Data, you only see such granted fields (for example, legal entity, division,etc). Any information is useful and appreciated. Can you help me?

Thanks

Pedro

[Latyshenko2 · Accepted solution]

Virginie and Nathan provided the main solution.

If the solution does not work for you, use the workaround: access Pay Groups through another MDF object.

For example, 1) you create a custom MDF object of type User with a field of type Generic Object referenced to Pay Group; 2) assign this custom object to a particular user so that the user sees it through his/her People Profile; 3) on the custom object, the user can select existing Pay Groups and modify them, also, if the user has Create permission for Pay Group object, there is the plus (+) button next to the Pay Group field and it could be used to create new Pay Groups.

Normally, the workaround is used as a quick way to reach the data. I do recommend to use the workaround only as an addition to Manage Data.

[former_member27731 · Accepted solution]

Hi Vladimir,

I am already working on it!

Thank you for your clear explication and great idea.

Pedro

[former_member27731 · Accepted solution]

Hi again Vladimir 🙂

Regarding the permissions, how is this managed? we grant permissions to this new custom MDF object. but should we maintain the permission to manage data?

Thanks

Pedro

[Latyshenko2 · Accepted solution]

Permission on the people profile block, permission on the custom object, and permission on the MDF objects in question (e.g. Pay Group).

Also, if this is your first custom-MDF-object block on the people profile, you can add it as a tile on the homepage with use of deeplink /sf/liveprofile#blockView/mdfBlock/[the MDF Screen ID]. It would look as a separate tool)))

[Virginie_Klein]

Hi Pedro,

you mean to limit the permission of the single objects like legal entity, not fields on the object, right?

If so, you can do this by securing the objects via Configure Object Definitions ("Secured" = Yes) and then grant the object permission only to those who should be able to access it.

Hope this helps.

Kind regards

Virginie

[former_member743167]

Hi Virginie,

Thank you very much for your prompt response 🙂

Basically, yes I want to limit for single objects (my bad, I wrote fields). I need to grant access to manage the Pay Group to some users but if I grant them this access they will be able to edit others referencial data (even if the access right is not ticked in the Permission role).

Officially SAP replies this is expected, but do we have workarounds for this?

E.g.: one user should access manage data and only view/edit "Pay Group" object, nothing else 🙂

Thank you once again

Pedro

[NathanWilkinson]

Have you given them access to non secured objects? Basically rule of thumb is only administrators should be accessing manage data.

[former_member27731]

Hi Nathan, thank you. Indeed, you are correct but I would like to know if there is any workaround for this within the community. 🙂 I do know one but I think it will only work for one user, ie, only one user will be able to see this limited view in Manage Data..

Although, rule of thumb is admin should access manage data