Adhoc Query Issue - How to restrict /SAPQUERY/H2 access

Question

Hi Experts,
I have created two User Groups HR_1 (assigned to infosets for Time data) and HR_2 (assigned to Infosets for Payroll data). Also, I want to assign the HR_1 to a user Time_admin and HR_2 to Payroll_Admin, so that Payroll admin do not have access to Time data and vice versa.
Now I can restrict the access but when I execute the Adhoc query for the user, I can see the User group that I have assigned with a default user
group /SAPQUERY/H2, which has access to all data.
My question is, how can I restrict the access for the /SAPQUERY/H2 for the users so that the users have only access to their user groups i.e.,
Time_admin to HR_1 only and Payroll_admin to HR_2 only.
Regards
Vikrant

Answer 1

I was expecting some Answer but was unfortunate enough.
I have found a solution and will mention it for those who face this issue in future.
Configuration in “The Global Area (Cross Client)”, has some limitations
1)      1) Restricting the access via T-Code S_PH0_48000510 (Ad-hoc Query) is difficult as this t-code S_PH0_48000510 uses the user group /SAPQUERY/H2 to which an Infoset is assigned /SAPQUERY/HR_ADM. This infoset has access to all the master data and is standard one (default).
2)      Also, this is available in “The Global Area (Cross Client)”, due to which there will be access to all HR master data.
Configuration in “Standard Area, i.e., Client Specific”
1)      With this approach, we will do the same configurations in “Standard Area (Client Specific)” i.e.,
I.            Create User groups (ZHR_1 and ZHR_2)
II.            Create Infosets (X1 for time management Infotypes and X2 for PM and PA Infotypes)
III.            Assign User Groups to Infosets (X1 to ZHR_1 and X2 to ZHR_2)
IV.            Assign Users to User Groups (As per the requirement)
2)      Additionally, Admin need to do two things
I.            For the Users Set Parameters via SU3 as:
Parameters for Users for Time Data
Parameter ID
Parameter Value
Description
AQB
ZHR_1
ABAP Query: User group
AQS
X1
SAP Query: Infoset
AQW
Standard
ABAP Query: Query area
Parameters for Users for OM/PA data
Parameter ID
Parameter Value
Description
AQB
ZHR_2
ABAP Query: User group
AQS
X2
SAP Query: Infoset
AQW
Standard
ABAP Query: Query area
II.            Provide access to T-Code S_PH0_48000513 (also calls Adhoc Query but this t-code will respect the parameters set by us in SU3).
III.            As a result of this approach, the Users on executing the T-Code S_PH0_48000513 will be directly moved to the Adhoc query screen with their authorized access.
NOTE:
these changes cannot be transported via Transport.
Regards,
Vikrant