SR Visibility Not Restricting by Business Unit Despite Using Predefined Data Security Condition

Hi,

We’re trying to restrict visibility of Service Requests (SRs) based on a user’s Business Unit (BU). Here’s what we’ve done so far:

Setup:

• Created a custom job role in Security Console.
• Added a Data Security Policy to the role with:
  • Data Resource: Service Request Header
  • Data Set: Select by instance set
  • Condition Name (predefined):
    “Access the service request header for table SVC_SERVICE_REQUESTS where the customer relationship management service request is associated with my business units or the application default business unit.”
  • All actions except Delete are selected.
• Assigned this custom role to users.