In SAP Business One, when a user is assigned to multiple user groups that grant conflicting authorizations for the same object, the system resolves this by applying the highest level of authorization. The hierarchy of authorizations is: Full Authorization > Read-Only > No Authorization. In this scenario, the user is granted "full", "read-only", and "none". The most generous or highest level among these is "full" authorization. Therefore, the user's effective permission for A/R invoices will be "Full".

A. The authorization defaults to read-only: This is incorrect. The system does not default to a middle-tier permission; it follows a specific "highest level" rule.

C. The first authorization that was assigned: This is incorrect. The order in which authorizations are assigned is irrelevant. The effective authorization is calculated based on all current assignments.

D. None, since there is an obvious conflict: This is incorrect. The SAP Business One authorization system is designed to resolve such conflicts automatically using a predefined hierarchy, not to block access.

1. SAP Business One 10.0 Administrator's Guide

(Version for SAP HANA)

Document Version: 1.1 - 2020-06-15

Chapter 5: "Administration"

Section 5.1.2.1 "General Authorizations"

Page 103. The guide states: "If a user belongs to several authorization groups

the user’s authorizations are the highest level of authorizations from the different groups."

2. SAP Business One 10.0 Administrator's Guide

(Version for Microsoft SQL Server)

Document Version: 1.1 - 2020-06-15

Chapter 5: "Administration"

Section 5.1.2.1 "General Authorizations"

Page 101. This version contains the identical principle: "If a user belongs to several authorization groups

the user’s authorizations are the highest level of authorizations from the different groups."

3. SAP Training Course TB1200: SAP Business One - Logistics

Unit 2: "Master Data"

Section on "User Setup and Authorizations". The course material explicitly details that the system grants the most optimistic or highest level of authorization when a user receives permissions from multiple sources (e.g.

different user groups).