Access Condition “Within Same Business Unit” Not Working as Expected in SoD Analysis

Summary:

Hi Team,

We have configured an SoD control “Create Invoice and Create Payments” with an access condition filter as "Within Same Business Unit = Yes"

Scenario:
The user currently holds:
AP Invoice Specialist role → US Business Unit
AP Manager role → US Business Unit
The same user is requesting:
AP Invoice Specialist role → CN Business Unit through Advanced Access Request
Expected Behavior:

Since the access condition is defined as “Within Same Business Unit = Yes”, the system should evaluate SoD conflicts only when both access points are within the same Business Unit.

In this case:

Existing access → US BU
Requested access → CN BU