Authorization objects for  transaction, one to view, and one to maintain

Hi all,
My requrement is to create two authorization objects for  transaction, one to view, and one to maintain.
I know how to create objetcs vai sm21, but i donot know how to crate objects with activity codes.
Please suggest how to create object where i can asign activity codes.
regards
manish

The Authorization Concept
R/3 uses authorization objects to assign authorizations to users. An authorization object is a template for an authorization. For example, authorization object F_SKA1_BUK - G/L Account: Authorization for company codes requires the specification of two field values: Company Code and Activity. To allow a General Ledger supervisor to create a general ledger master record, he/she must be assigned an authorization to create (Activity 1) accounts for a specific company code (eg. Company Code 2000). Such an authorization is created using the object F_SKA1_BUK by assigning these field values and naming the authorization following an appropriate convention (eg. Z_SCC20001).
Authorizations may be classified as general authorizations, organizational authorizations or functional authorizations. General authorizations specify the functions a user may perform. Authorization object F_SKA1_BUK has been assigned to the function for creating general ledger master records. The system checks for the useru2019s authorization to create general ledger accounts (Activity 1) in at least one company code. The system then checks whether the user is permitted to create accounts for the specified organizational unit (company code) and has the required functional authorizations. Authorizations in this case may restrict the user to certain Charts of Accounts. In addition, an authorization group may be defined in certain authorization objects to protect individual master records.
Profiles relating to an organizational role (eg. General Ledger Supervisor) are defined consisting of a list of authorizations and other profiles. Such profiles are then assigned to users with that role and stored in their user master record along with other data (eg. password).
Do check this link as well.
http://articles.techrepublic.com.com/5100-10878_11-5110893.html

Similar Messages

  • Authorization Object   for  Transaction code XSLT_TOOL

    Hi Friends
    When i try to use transaction xslt_tool the following error appears "You are not authorized to use transaction xslt_tool".
    Can anyone give  the Authorization object  for  transaction  xslt_tool,
    Regards.
    Wishva

    Give access to the transaction in PFCG. 
    Then use SU53 to highlight any additional access required.

  • Authorization Object for Transaction Code

    Hi,
    Is there a report I can execute to give me the list of authorization object for this transaction code?
    Thanks.

    Check Transaction SU24
    Alternatively you can go to SE16-- enter the table name TSTCA, then enter the T CODE, you will get the object related to that T Code.
    Reward points..

  • How to find out Authorization Object for Plant

    Hi,
    I have to implement an Authorization check for Plant in My Report Program.
    Is there any transaction which can help me to find out Authorization Object for any field like Material and plant?
    Thanks,
    Mamta

    Using SU21 u can create Authorisation Object.
    The ABAP command AUTHORITY-CHECK is used for performing authorizaton checks in programs.
    check f1 help on AUTHORITY-CHECK for the syntax.
    check these links
    link:[http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a92195a9-0b01-0010-909c-f330ea4a585c;jsessionid=(J2EE3417500)ID1605942050DB11298929682009193279End]

  • Authorization object for "set TECO" and "undo TECO"

    We want to control the authorization for "set TECO" and "undo TECO",but we can't find relevant Authorization object. Is there any Authorization object  for these two functions? If there's no Authorization object for them ,then how can we achieve the same result? Thank you very much!

    Hi,
    Under one user ID the auth object B_USERSTAT will have the authorization key in which user will be responsible to change the TECO user status.
    One user will not have any authorization key under B_USERSTAT Auth_Object.
    Hope it's will give you help.
    Regards,
    Vishal Kr. Sharma

  • How do i find authorization object for a transaction code?

    Hi SD Guru's
    I need to find the authorization object for both standard & Z transactions.
    How can i find this?
    Regards
    Ravi

    Hi,
    check the coding with SE38 for "authority-check" and you will get the objects or set a breakpoint on statement "authority-check" while you execute the transaction.
    Regards,
    Andreas

  • Disabling authorizations checks for transactions SU53 and/or SU56.

    Greetings.
    I seem to remember reading that there was either a system profile parameter or a table entry that can be used to disable all authorizations checks for transactions SU53 and/or SU56.
    Any truth in this or is my mind playing tricks on me?

    Hi,
    I guess theres is profile param auth/tcodes_not_checked(I guess thats right), this will exclude SU53/SU56 from checks on transaction code.
    This can be done using RZ10 and need to restart the system.
    Rakesh

  • Authorization Objects for GL, AP, and PCA

    Hi,
    What is the difference in:
    1. Authorization Objects
    2. Facility Objects
    3. Profit Center Objects
    Where can I find the above objects related to:
    1. GL
    2. AP
    3. PCA (Profit Center Accounting)
    Please give me the answer, I will assign points to you.
    Thanks in advance.

    Hi,
    1) Make the characterstics like Company code, Controlling Area, Proficenter ..etc as authorization relevent (RSA1)
    2) Create the Respective Authorization objects for each of the above Characterstics (RSSM).
    3) And assign the Cubes and ODS es to the Authorization Object RSSM
    4) Create and use the Authorization variables on the above characterstics in reports
    5) maitain the access for all users through the roles by including and maintaining the AOs (created in step 2)
    With rgds,
    Anil Kumar Sharma .P

  • Authorization Object for Ibase

    Hi all,
      I am developing PCUI, and one of the requirement is based on login user from portal, the PCUI view for Ibase / Installed Bases should be View Only.
      Can this be restricted via authorization object, by giving the 'Display' right to the role, instead of full authorization?
      My basis inform me that he couldn't find the authorization object for Installed Bases. But I doubt it. Can any expert give me a guide?
      ** for launching the PCUI ~ Ibase, application is COMM_IBASE
    regards,
    Ginnie.

    Hi,
    Check out the object
    IB_IBASE      AAAB     Authorization Object for Installed Base
    Rakesh

  • Authorization object for Object services

    Hello together,
    I want to know if there is an authorization object for Generic object services functionilty especially the WF options like WF overview, start WF, Archieve WF..............................
    My understanding is any user who has access to a particular Business object, can user GOS to view WF stuff..................Is my understanding correct or should we have extra functions.....................
    Regards

    Check authorization objects S_OC_ROLE and, for recent releases, S_GOS_ATT.
    Regards,
    Raymond

  • Authorization Object for Marketing Attributes

    Hi Experts,
    We are working with CRM 2007 and use in BP Marketing Attributes. Does someone know if there are any authorization objects for Marketing Attributes? We would like to restrict some of users to see some Attribute sets!
    Thank you in advance,
    Roula

    Hi Roula,
    Thank you so much for awarding points.
    Please note that in Transaction PFCG you have to assign the appropriate three digit attribute set key under the authorization group BGKRL to the authorization object C_KLAH_BKL for assigning attribute sets and to the authorization object C_KLAH_BKP for editing attribute sets.
    Please have a look at the Note in the bottom of the page at the following link for further information.
    http://help.sap.com/saphelp_crm60/helpdata/en/46/3517cc86e01421e10000000a1553f6/frameset.htm
    Regards,
    Deepak

  • Maintain assignments of authorization objects for Z Webdynpros in SU24

    Hello experts,
    When we display the assignments of authorization objects for External Services -   Webdynpros in transaction SU24,  Z_webdynpros are not shown in the screen.
    We need to add more webdynpros in that table.
    I suposse that there must exist a way for updating that table with the Z webdynpros developed or some configuration is needed.
    Thanks in advance...
    Hector Longarte

    The Zwebdynpros I am talking about are Java Webdynpros in the SAP Portals, and the SAP ERP is onlyan ABAP stack.
    Is this configuration posible??

  • Custom Authorization Object for HR

    Hi,
    As per our Company's internal needs I have created a Custom Authorization Object for HR named ZP_ORGIN (it has Personnel Subarea field BTRTL besides what's there in Auth. Object P_ORGIN) and made it Check/Maintain for transaction PA30 in SU24.
    I can see the entries in the USOBT_C & USOBX_C tables for this object, I am also able to add this object in the roles as well.
    Everything looks fine, but when I execute the transaction & do a trace on it, the object ZP_ORGIN is never checked (for a user having this object in his/her User Master). Only P_ORGIN object is checked instead.
    I believe I'll have to write some ABAP code e.g. AUTHORITY-CHECK OBJECT 'ZP_ORGIN' etc. Can anybody tell  which User Exit or Field Exit I'll have to put the AUTHORITY-CHECK code in, so that my new custom authorization object is alwayz checked.
    Your help will be appreciated.
    Thanks,
    Mandeep Virk

    Hi,
    I have created a Custom Authorization Object for HR named Z_ORIGIN (it has Personnel Subarea field BTRTL besides what's there in Auth. Object P_ORIGIN) and made it Check/Maintain for transaction PA30 in SU24.
    I can see the entries in the USOBT_C & USOBX_C tables for this object, I am also able to add this object in the roles as well.
    Everything looks fine, but when I execute the transaction  the object Z_ORIGIN is never checked (for a user having this object in his/her User Master). Only P_ORIGIN object is checked instead.
    We've ran the report RPUACG00 also which is mentioned in this thread.
    We also coded the authority check code in the both user exit ZXPADU01 and ZXPADU02 for PA infotype operations
    I believe I'll have to write some ABAP code e.g. AUTHORITY-CHECK OBJECT 'ZP_ORGIN' etc. Can anybody tell which User Exit or Field Exit I'll have to put the AUTHORITY-CHECK code in, so that my new custom authorization object is alwayz checked
    but still it is taking the P_ORGIN object.

  • HR Authorization : Custom Authorization Object  for P_ORGIN

    Hi,
    I have created a Custom Authorization Object for HR named Z_ORIGIN (it has Personnel Subarea field BTRTL besides what's there in Auth. Object P_ORIGIN) and made it Check/Maintain for transaction PA30 in SU24.
    I can see the entries in the USOBT_C & USOBX_C tables for this object, I am also able to add this object in the roles as well.
    Everything looks fine, but when I execute the transaction the object Z_ORIGIN is never checked (for a user having this object in his/her User Master). Only P_ORIGIN object is checked instead.
    We've ran the report RPUACG00 also which is mentioned in this thread.
    We also coded the authority check code in the both user exit ZXPADU01 and ZXPADU02 for PA infotype operations
    but still it is taking the P_ORGIN object

    Online Help
    <a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/d9/64141c0774194593da29f3cb813f1b/frameset.htm">P_NNNNNCON (HR Master Data: Customer-Specific Authorization Object with Context)</a>

  • Authorization Object For Activate Reservation/Purchase Req - IW31

    Hi,
    I want to authorize only certain users to use button  "Activate Reservation/Purchase Req" IW31 transaction. What is the Authorization Object for the above mentioned button, if any. Is there any other way that i can do this activity in customizing? I am using ECC 6.0
    We find that activating the objects below (suggests- SU24)
    M_BANF_BSA
    M_BANF_EKG
    M_BANF_EKO
    M_BANF_WRK
    allowed in IW31, that 'not-authorized-users' would not be able to create purchase requistions. therefore: no material procurement.
    But for reservations, we didn´t find  the object in  IW31.
    Thanks and regards
    Gabriel.
    Edited by: Gabriel_Fornazier on Dec 31, 2010 12:16 PM

    Olá Michely
    Segundo a SAP não existe objeto de autorização em BASIS para restringir por usuário o botão da transação IW31 que eu precisava(Ativar Reserv./Req. de Compra). Portanto segundo a SAP, poderia usar a ampliação IWO10006 para resolver isso.
    E foi o que fiz. Primeiramente criei manualmente um objeto de autorização 'Z'  dummy, para atribuir a um usuário que não quero que enxergue o botão.   'DISP' o nome do botão(dar F1 no mesmo) que desejo esconder.
    Posteriormete na EXIT desenvolvi o seguinte código para esconder o botão:
    AUTHORITY-CHECK OBJECT 'Z_VORG_ORD'
               ID 'ZBETRVORG' DUMMY.
    IF SY-SUBRC EQ 0.
      FCODE_EXC_CUST-FCODE = 'DISP'.
      APPEND FCODE_EXC_CUST.
    ENDIF.
    Portanto, todo usuario que tiver aquele objeto de autorização ''Z'' no seu perfil não vai exergar o botão Reserv./Req. de Compra.
    Essa é a melhor solução do que usar objetos de autorização de outras transações.
    Espero ter ajudado
    abraços,
    Gabriel M. Fornazier
    SAP FI Certified Professional
    Minas Gerais - Brasil

Maybe you are looking for

  • F4 help for a field in module pool

    Hello Experts, I need to provide f4 help on field sales office(VKBUR) in my module pool program. I have searched forums about it. but all forum contains either doc. no or customers etc. these field are directly available on table, so very easy to fin

  • Large Text Being Chopped / Truncated

    Hi, I have a marque displaying some text, but the Text is being chopped at the Top. I have tried increasing the height but no difference. This also happens on some of my Page Titles,and I don't know how to correct it. The Code is as follows (In the P

  • Has my imac been hacked?  appearance of univinted "guest" user?

    I turned off my new imac overnight.  This AM when I turned it on and started to log in there was a "new" guest user on my login screen. This seems pretty alarming as if somehow someone has gotten an account on my iMac that I have not authorized. Yest

  • How can you stop a dunning letter from printing?

    Hi, We've set-up 3 dunning letters for our customers but we only want levels 1 and 2 to send a dunning letter. Level 3 should update the customer master but no letter should be sent. Unfortunately we can't get this to work and a letter is created for

  • Can't configure gmail on iPhone 4S

    Hi, I have been using iPhone 4S since 3 months by now. Since then I have been facing the same problem while syncronizing my gmail account with the iPhone device. The exact error message says : Even after I checked the gmail account has IMAP and POP s