For more information, please refer to this announcement explaining best practices for getting answers to questions.
Person Security profile based on Organization hierarchy and legal entity
Hi All,
I have created an AOR for a person, with scope of responsibility being - Legal Entity and organization hierarchy. Screenshot below. Now if we create a data role with person security profile and attach it to a user, then the user should be able to view only those employees who fall within this scope. I have created a Data role and assigned person security profile based on AOR.
When this role is assigned to a user, then the user is not able to view employees outside of the business units he shouldn't. This works as expected. However, the user is able to search for employee from different legal entity, which he shouldn't. I am attaching the screenshot of the person security profile used.