Difference between “Assigned Restriction Types” and “Permission Filters” for Key Figure Authorizatio

[Olli76]

Hi everyone,

I have a question about setting permissions in SAP IBP:
I want to ensure that only the key figure “SAP REP QTY” is editable, while all other key figures are read-only.

I’ve noticed there are two options for this:

1. Assigned Restriction Types in the “Maintain Business Roles” app:

   • Here, I can specify which key figures should be editable within a certain section.

2. Permission Filters:

   • Alternatively, I can create a permission filter in which I define exactly which key figures are editable or non-editable.

My questions are:

• How do these two settings work together?
• When is it sufficient to use only “Assigned Restriction Types,” and when should I also define a “Permission Filter”?
• Why do both options exist, and in which scenarios is each method typically used?

I appreciate any help, tips, or best practices on how to implement this cleanly. Thank you in advance!

Best regards,
Oliver

[Andrei_Lupu]

Hi @Olli76 ,

The subject of Roles and Authorizations is a bit messy/convoluted right now in IBP, but to keep it simple:

- you would use "Key Figure Restrictions" when you want to allow access to the Key Figure, regardless of the attributes (example planners will be able to change Actuals Qty, regardless of the region/country/customer).

- you would use "Permission Filter" + specify an attribute, when you want to be more restrictive in terms of access (example planners will be able to change Actuals Qty only for the attribute you have mentioned in the profile, eg Region = EU/US etc)

[Olli76]

thanks for the reponse.