Hello SAP HR authorization experts!!
I would like to know how can we restrict HR Admins changing their own data using PA30 in backend.
Currently we have given access to HR Admins in SAP to maintain HR Data for all employees using PA30 in the organisation. In addition to this HR Admins have ESS Roles assigned, in order for them to change their own data using the Portal.
Problem is due to HR Admin users having ESS ROLES along with HR Master data maintenance roles in PROD system and this is allowing them to change their own data using PA30.
But we are looking for a solution to stop HR Admin users changing their own data via backend, instead they should use the portal to change their own data. Example: Currently HR Admins can update their holiday quotas using PA30 for their own PERNR (personnel number) and we want a solution to stop this, but HR Admin users should still be able to change holiday quotas for other employees.
Please provide inputs how can we resolve this.
Many Thanks