Cost Center Security

HI,
We have a security requirement on one the G/L plan to actual BEX report for Cost center. the report has cost center hierarchy. but the 3 levels we need security are:
1) managers that can access all cost centers
2) managers that can access a range of cost centers
3) managers that can access one cost center
we have updated 0COSTCENTER as authorizations relevant, but it works for 1 & 3 from above but not for 2. we have changed the authorization relevant to hierarchy, selection, interval and it seems like the range doesnt work.
Any help would be appreciated.
thanks,

In rsecadmin you added the hierarchy to your object and the analysis authorization is in your role(check transaction PFCG)?
Maybe you added the hierarchy, but has the user somewhere else full authorization.
Please let me know.
Kind regards,
Benno Mateman

Similar Messages

Cost Center Security Issue

hi gurus
i have a situation in which i have like 60 plus users every one has authorization to different set of Cost centers. now how can i accopmlish that.
secondly suppose they run a report with a Cost Center Hierarchy with lots of cost centers at different levels, some they have access to some they dont, now what will happen ?
- will they be able to see only the cost centers in the hierarchy they have access too.
- or will they not be able to run the report at all because they dont have access to some of the cost centers.
- or they will be able to access soem nodes but no the ones that have atleast one CC that they are not authorized for.
by the way i am working on BI-7, the latest version of BW
thanks

Yu dont have any other better option other than maintaining authorization values for the users for their respective cost centres.
In BI 7, you need to create authorization objects in RSECADMIN and maintain values. There will be heavy maintenance efforts.
Ravi Thothadri

Authorization: data level security by cost center to finance line items

We have a business unit request requiring implementation of cost center data level security through FI transaction codes for financial line items. Example requirement: Cost center manager can execute FS10N GL account line item display, drill into the balance and only return those line items to which the cost center manager has access. Cost center managers currently report their cost center expenses via cost center accounting report and through those reports are able to drill into the FI line items to display document and line item details. Cost Center managers, due to their varied responsibilities, also have access to tcode FS10N, from which if they execute reports directly, can access data for cost centers which they are not responsible for.
Our security team has stated that the determination of authorization objects which are checked at transaction code/program execution are not configurable. We’ve found when debugging that it would be possible to implement user exits for additional authorization checks, but that in order for the authorization check to actually get called, the object must be set as ‘checked’ within SU22/SU24.
Has anyone had a request to implement such cost center data level security for financial line items through Financial transaction codes? If so, what steps were taken to be implemented? Was this able to be accomplished via security configuration and PFCG security role updates or was custom code logic needed? If custom logic was needed, to what extent was this implemented (what tcodes/programs were included; how was the decision of what to include and exclude determined). What was the duration of this effort?
Has anyone had a request to implement such cost center data level security request for financial line items via Financial transaction codes and not implemented the request? How was this communicated to the business that the request for data level security goes against SAP’s authorization design?
Thank you in advance for your input,
Becky Zick

Hi Becky
Have you tried with object K_REPO_CCA? You have available these fields to filter authorizations.
I hope this helps you
Regards
Eduardo

Security on Cost Center

hi gurus
i have a situation in which i have like 60 plus users every one has authorization to different set of Cost centers. now how can i accopmlish that.
secondly suppose they run a report with a Cost Center Hierarchy with lots of cost centers at different levels, some they have access to some they dont, now what will happen ?
- will they be able to see only the cost centers in the hierarchy they have access too.
- or will they not be able to run the report at all because they dont have access to some of the cost centers.
- or they will be able to access soem nodes but no the ones that have atleast one CC that they are not authorized for.
by the way i am working on BI-7, the latest version of BW
thanks

Hi Adnan,
the answers to your questions depend on the concrete report you are talking about and how detailed authority-checks have been implemented by the responsible developer.
You can do one of the following things to find out what is checked yourself:
1. codescan
2. debug the execution of the report having set a breakpoint on the command AUTHORITY-CHECK
3. do a system trace (transaction ST01) with trace component "Authorization Check" and run the report
Hope this helps to find out whether your authorization concept also works for this report.
Regards,
Claudia

HCM Security - Cost Center

Hello All,
Since we are providing some HR master data accss to Finance users, we would like to restrict the access based on Cost Centers. We would like to create roles and assign to finance users who will then be able to access data of employees who belong to a certain Cost Center. We have already configured Org Key and it does not have Cost Center (this can not be changed).
Is there any other standard way of including Cost Centers as authorizaton without using Org Key in P_ORGIN?
Thanks,
Nakul

Saku,
I went through the SAP Help pages and it does look like a good solution. I will give it a shot in our sandbox today and see if it works for us. I will update this thread again soon.
I do see however that there is a standard report to be run after the custom auth object is implemented. Have you had any issues running these reports; any collateral damage chances?
We do use al the standard HCM auth objects currently, and they will continue to work... this modification wont affect that, correct? I will go through this myself this week, but wanted to check with you since you have implemented this often.
Thanks a lot for your time and advice
Thanks,
Nakul

BW Analysis authorization issue on cost center range

Hello BIW security experts
I have a problem where I created an analysis authorization on a cost center range and it looks like the interval is not working. The report is just a list of cost centers (demo to users to prove that analysis authorizations work in order to skip 2 managerial cost centers.
. Cost centers are numeric. Example: 2000100. In the drop down list they appear as such.
. I want to have the following cost center range: 1000000 to 1000771, 1000773 to 2000771, 2000773 to 9999999.
Thereofore 1000772 and 2000772 should not appear in the list.
. In the analysis authorization I have put the 3 ranges above on 3 separate lines. 'BT' is the operator. The cost centers have been selected from the drop down list.
Results: I get only 1 record from the report.... 2000772. (which is one I want to exclude..
Steps tried to debug:
. When I put a list of cost centers in the analysis authorization on separate line with the 'EQ' operator, then the report works.
. I tried putting ' ' delimiters since cost center is a char field but it fails.
. I tried adding leading and trailing zeros to fill up the char(10) but no luck.
. I tried creating a hierarchy with the interval and put it in the hierachy auth. tab and it does not work either. It gives the same number of records than the first step.
. A hierarchy with single values work.
I do not know what else to try..
Thanks.
YB.

Good morning
Here it is from RSECVAL
ZCC_TEST     0COSTCENTER                    I       BT        1000000                                                      1000771
ZCC_TEST     0COSTCENTER                    I       BT        1000773                                                      2000771
ZCC_TEST     0COSTCENTER                    I       BT        2000773                                                      9999999
ZCC_TEST     0COSTCENTER                    I       EQ        #
ZCC_TEST     0COSTCENTER                    I       EQ        :
ZCC_TEST     0INFOPROV                         I       CP        *
ZCC_TEST     0TCAACTVT                        I       EQ        03
ZCC_TEST     0TCAIPROV                         I       CP        *
ZCC_TEST     0TCAKYFNM                       I       CP        *
Thank you for your help.

How to design and develop Cost center with SAP BPC 5.1 ?

Hi all,
Can any one tell me how to design and develop cost center planning (what are the steps to follow) using SAP BPC 5.1?
Thanks,
Sandy

Hi Sandeep,
1:We need to look at whether cost center planning is tied to a profit center level and/or to a company code level
2:We could have dimensions like Account(which in this case would reflect cost element),category,entity,time with additional dimension s like profit center(cost centers can have a direct mapping to profit center,usage of properties would help in here),WBS ,projects,investment position id's etc.
3:We could look at different applications like HR(pay roll related expenses),admin,capex(to bring in depreciation values) etc to bring in data to pull in data to different cost centers either directly or via script logic(usage of destination_app)
4:For those values not tied up to profit centers ,we would look at allocating/distributing the expenses to different cost elements
5:We need to decide whether we do the planning on a monthly/periodic vs yearly level where in we would look at actual values and incrementing at a certain % to fill in as the base for our planning(using category=actual/plan plus timeperiods).We could look at Top down vs botton up approach as well to segregate the planned costs
6:Consideration should be made at security level to identify/restrict different users who needs to access specific cost centers
Yes,this is just a small jist of structure,there are 100's of other considerations which would come into picture from a business requirement level.
regards
shyam

Cost Center on HRMS

Hi All ....
I need to know what is the diffrence between three types of cost center on HRMS element link screen:
1. Fixed Cost
2. Distributed cost.
3. Normal Cost.
How I can determine a flexfied qualifier when i define the cost center FF.
Regards;

I need to know what is the diffrence between three types of cost center on HRMS element link screen:
1. Fixed CostWhen you want to cost the element only to one account, the account you specify in element link then you use Fixed Cost. Mostly this is used for deductions.
2. Distributed cost.When you want the Cost of some elements to be distributed over your earnings like say you want to cost medicare or social security paid by employer back to the cost center to which earnings are costed.
3. Normal Cost.This is used when each element entered for employee has different costing. this is generally used for regular hours worked by an employee.
>
How I can determine a flexfied qualifier when i define the cost center FF.Qualifiers tells u that which segments you want to define for Costing level. As you can define costing a five levels, payroll, organization, link, assignment and entries, you define at the KFF which segments you want to see at each level

Cost Center -- Automatic Cost Allocation

Hi at all,
1. We receive a monthly invoice for electricity etc.
2. We put the hole amount in one Cost Center.
3. At the end we allocate the amount manually to each relevant Cost Center/Department.
From A $100.000
To S $50.000
To T $40.000
To Z $10.000
To ...
Is there a way to automate this?
It can be really annoying.
Markus

Hi Markus,
If i understand you correctly,you will book energy cost to one cost center and end of the month you will allocate to other cost centers.
two ways you can allocate costs in.
1. Assessment
2. Distribution
Assessment:
Assessment is an activity that you perform periodically, during the period-end closing in Overhead Cost Controlling (CO-OM), in which primary and secondary overhead costs are assessed from one or more sender objects to one or more receiver objects.
Assessment means that the sending cost center is credited and the receiving cost center is charged under a freely definable secondary cost element. The original cost elements that were charged by the sender cost center are lost, and are converted to one or more assessment cost elements (secondary cost elements).
Assessment groups together the posted primary and secondary costs and allocates them to the receiving cost center(s) in an assessment cost element. The cost centers for assessment are the quality lab, IT, cafeteria, housekeeping and plant security.
For example, you could assess the cost from the Reception cost center to the other cost centers based on the headcount managed in those cost centers.
T.code : KSU1,KSU2 and KSU3,
To Execute :KSU5
Distribution:
Distribution is an activity that you perform periodically, during the period-end closing in Overhead Cost Controlling (CO-OM), in which primary overhead costs are distributed from one or more sender objects to one or more receiver objects.
Many documents in Financial Accounting involve overhead costs. A clear allocation to one or more cost centers is not possible, or only with a major effort. You can use the allocation cost centers and internal orders as auxiliary constructs in such cases. During distribution, these costs are allocated (distributed) from their allocation cost centers to the actual receivers according to freely definable rules. The sender cost center is credited, and the receiving cost center charged, under the original cost element. In contrast to periodic reposting, however, the accounting information is lost in the process.
T.code : KSV1,KSV2 and KSV3
To Execute :KSV5
if you want to allocate costs by head count or fixed percentage etc.when your creating cycles you can choose these options.
Thanks,
Rau

OrgModeler 3.0 - Cost Center Name showing as N/A

Hi,
If the user is given SAP_ALL, the cost center name is showing what it's supposed to be.
However, if we remove the SAP_ALL, the cost center name is showing as N/A.
I have already given user authorization for FunctionGroup /NAKISA/HRFUNS, but it still doesn't show.
Cost center ID is shown, just that the description is not.
Anyone experience this before?
I did a trace via ST01, I don't really see any thing suspicious.
Thanks
Jack

Hi Jack,
Your own tests indicate that this is a security issue. However, just to be sure can you check the cds.log file and see if there are any errors? Sometimes authorization errors are displayed there. Also try putting Logging Level to 1 (see the Nakisa Wiki for info to do that). I would also check the downloadSchema to see if the function that extracts cost centre has authority set, although this is based on SAP authorizations so that should be the first place to investigate.
Good luck!
Luke

Doesn't save Cost Center values

Hi experts ,
I have an issue with cost center,When I have a cost center in product envi in the Headcount application.I am trying to post values against cost center for employees.
But its not saved in the DB.I have crosss checked all the locks and tried to replicate this isue in our test sys,but it doesn't replicate.Please advise.
Ravi

Hi,
I would request you to follow few things.
1. Check the member access profile for the problematic User ID. Make sure that the ID has the write access to the members of the secured dimensions.
2. Full optimize the application, so that the FactWB table is empty.
3. Now run the input schedule with the problematic ID and post records. After this, open the factWB table and compare the records.

Management or Cost Center Segment

Hi
I am newbie and setting up my accounting flexfield segments. I want to have department as one of the segment. How should I qualify it as Cost Center or Management. I want to track the budget and expense by the department.
I would really .appreciate all your advice.
Regards
Reem

Hi
use the below link which will give you more idea of Management segment Qualier with an demonstrated example.
http://www.oracleappshub.com/release12/r12-management-reporting-security/
Regards
Madhav G
Note: if you question is answered please mark the thread as answered and also mark weather the answer provided is correct/helpful.

PM Order Settlement to Cost Center(real) & Internal Order simultaneously

Dear Experts.
I have a request from client to settle 100% of PM order to Cost Center (real) and internal order (statistical) simultaneously. The purpose of statistical orders is to capture all the expenses (electricity, water, security charges, maintenance, etc...) location-wise.
PM Order settlement through statistical IO will contribute to the maintenance aspect, and other expenses will be captured to statistical IO through financial GL posting. Hence each location will have a unique statistical order maintained.
In the settlement Profile, I have maintained Order and Cost Center elements as "Settlement Optional" Under "Valid receivers". But the system doesn't allow this settlement. As per my understanding SAP allows settlement (100%) to go only to a single object.
Appreciate your inputs on this matter.
Thanks,
thushantha.

hi,
Please check how you maintained the real object in the settlement rule.
You must maintain both the cost center and internal order on the same assignment line such as:
CAT:     Settlement receivers
ORD      ORD_Number   Cst_Center_number         100%   PER
The system will correctly generate KI178 if you have the following:
CAT:     Settlement receivers
ORD      ORD_Number                              100%   PER
CTR      Cst_Center_number                       100%   FUL
regards
Waman

Error in creation of Cost center

Hi All,
Trying to create Cost Center through KS01, however I am getting an error as "No compnay Code assignemt to the Contrilling area TS". can anyone please explaine me on the process to chek this error.
Bharath

HI Bharath,
Please check the spro seeting for this error.
spro -> enterprise structure - > Assignemtn - >controlling - > Assign Company Code to Controlling Area.
Please check whether the required Company code has been assigned to the Controlling Area. If not please assign the required and check or the same.
Please note: A company code can be assigned to one controlling are only
Regards,
Madhu Sudhanan

HR PNP Logical Database Using Cost Center selection: error!?

Hi all,
I'm using PNP logical data base and using the selection-fields available through HR Class Reports (a copy of PAY_DEF) but what happens is if in selection-screen I fill the personnel number say 1000, i get the payroll data I'm trying to get, but if i use the search field cost center of that exact person i get nothing. Does anyone has a clue on what i might be doing wrong? Because all the other search fields work, company code, HR area, everyone, but cost center, and I'm positive that i use the right cost center.
Thanks in advance,
Paula

Even though nobody answered me, i finally found the solution for my problem. so and because someone might need it here it is:
Go to Spro->Personnel Management->Human Resources Information System->Reporting->Adjusting the Standard Selection Screen and then:
1st Create Report Categories and
2nd Assign Report Categories
Since not all rep. categories on the 1st assignment is explicit on how will sel screen appear i advice you to go to the 2nd point, and execute some of the programs that appear there, and that might look alike to what you are looking for, and if you are so lucky as to find one exact use the same report category in your program, if its very alike, well, copy the Report Category into one of your own and change it the way you need it to be.
Hope this be helpfull for someone.
Paula.

Cost Center Security

Similar Messages

Maybe you are looking for