Analysis auth obj assigment

Question

Hi
   Iam created one auth obj in rsec admin. how can i assign the auth obj to user .My answer is  1)direct assigment 2) through roles.
for example: created analysis auth obj is : ztest_1
It have the info obj : 0customer. and iam entered two values(values : A & B) in detail tab.
In role tab where i have to find the created analysis auth obj.to assign values .like below
Now i would like to assign this auth obj to user1 through role only for the customer value A .
For user2 i have to restricted vale B.
In direct assigment path will be the user>assign>specify the user name (user A)> give the created analysis auth obj (ztest_1)>select insert.
This is the  process ...right?
Now i would like to assign only one value (value A for the user A).How it is possiable in direct assigment..
Other wise i have to create diff analysis auth obj(ztest_1...etc) for diff values(A &B)f or particular info obj(customer)?
Thanks
B.K
Edited by: B.K on Jul 15, 2008 12:44 PM

Answer 1

Hello B.K.,
When you create an authorization ztest_1 with 0customer with values A & B, this will always have the two values for the customer just like it was before with the old authorization method.
So no matter what way you assign this authorization to the user it will always have the two values!
To separate (filter) only one value (A or B) you have to create two different authorizations, one for customer A and one for customer B.
To assign, the direct assignment is just like you referred.
To assign with the roles, go to the desired role in PFCG, enter in change mode, go to tab Authorizations tab and click on change authorization data (pencil button).
Inside there, click on manual insert objects (something like this) and insert the object name S_RS_AUTH.
You'll have a yellow sign.
Expand that tree where the yellow sign is and click on the pencil button in front of the last yellow sign of the tree.
In "Value from" in that next window insert the name of the authorization (in your example ztest_1).
Generate your role.
Now if you assign that role to the user "user1" in transaction su01.
If ztest_1 has the values A & B for customer then user1 will have both values. If you separate the two authorizations let's say ztest_1A and ztest_1B with respectively the values A and B separate for the 0customer object.
You could assign in the role the value ztest_1A in S_RS_AUTH values, and assign that role to the user "user1" in su01, and you could direct assign (just like you referred before) to the user2 the authorization object ztest_1B.
Therefore you'll have user1 with the value A and user2 with the value B.
Please assign points,
Diogo.