ARQ: What is the authorization object to restrict system selection while creating a request???

Hi All,
I am trying to know how I can restrict a requester to select specific system only while creating a request.
I could find aut. object GRAC_ROLEP in role "XXX_requester". There is field GRAC_SYSID in this object wherein
I can specify the connector name. Initially, it was having "*" value and then I changed it to specific
connector. I sychronized the roles/users data and tried to raise a request. However, I still find all the
connectors defined including LDAP!
May I know how I can show only "required" connectors while creating a request?
Regards,
Faisal

Dear Faisal,
use GRAC_SYS and restrict GRAC_SYSID to the systems you want to display.
Regards,
Alessandro

Similar Messages

BW Authorization Object to restrict Transporting Requests

Hi...
In our BW systems, all the developers are given the profile SAP_ALL. So, the developers have the access to transport their objects from BW Development(BWD) client to BW Quality(BWQ) Client and from BWQ to BW Production client (BWP).
I want to restrict the developers to do the transports. What is the authorization object used to restrict the users to transport requests?
Any documentation how to do that?
Thanks,
Sai.

It can be done with the authorization objects S_TRANSPRT and S_CTS_ADMI.
S_TRANSPRT creating transport request and S_CTS_ADMI for moving transport request.
I would like to work on that project where I can get SAP_ALL access..:)
Check the documentation.
http://help.sap.com/saphelp_nw04/helpdata/en/8d/45ef39521e3314e10000000a11402f/content.htm
Thanks.

Can we reuse the Authorization objects in MM01 for Custom TCODE ZMM01

Hi all,
We need to create screens or transaction code ZMM01 which will have all views in the form of a tab like sales data will have a tab to input sales information like plant data as its own tab to input plant specific data
ceating material masters entries in Ztables like ZMARA,ZMARC,ZMVKE.
Now my question is can we use the same authorization objects which are being used for standrard MM01 transaction code because same users who use MM01 will use ZMM01.
If this is possible how can I know what are the authorization objects which I need to program for my ZMM01 Tcode.
All replies are rewarded.
Regards
Martin.

hi yes
it is possible go to transaction SU21
and search MM_G object class you can reuse the same for ur Z transaction
also u will have to use SU22 to assing tcode to the obejct class
Harish

Restricting the authorization Object for B2B Transactions

Hi All
we are facing the problem in the ISA b2b app, actually the scenario is as below.
we have various transaction types like b2b sales,Peoplesoft order,Request for Order change, RMA ,Request for Quotation(RFQ) and metel order.
As per the requirement, The client wants only a few functionalities for a particular user.
Example:
Transaction Type Authorization
PeopleSoft order View only View only
B2B:Req. OrderCh x x
B2B: Req. RMA
B2B: Req. Quote x x
Metel Order x
For b2b sales transaction a lower level employee would only be able to view the order and he should be restricted to make any changes. Is there a posibility to restrict in this manner? This is Urgent. Please respond immediately. Thanking you in anticipation.
Message was edited by:
Sunil Kumar

>
Viral741 wrote:
> Hi All
>
> I have a requirement in SAP Security to restrict the authorization object S_ALV_LAYO to a particular set of users.
>
> Background:
>
> We use composite roles which is shared accross all areas(Finace,marketing,work managment).Now the requirement is for from Work managment to restrict S_ALV_LAYO so that user cant change default layout and can create user specific layout,but other areas are not ready for this.So please let me know if there is any way i can restrict this auth object only for work managment area only.
>
> Thanks,
>
> Nitesh
Nitesh,
Remove access to S_ALV_LAYO for general users and give access to F_IT_ALV instead. Keep S_ALV_LAYO for the users who will be maintaining the default layout.
Good Luck!

What is the transaction to see the Authorization objects in the CRM system?

Hello Guys,
Please let me know transaction code to see the Authorization objects in the CRM System?
Thanks in advance.
Regards,
Vinay

Hi Nagur,
With T.Code SU21 you can see the Authorization objects in the CRM System. If you want to see Authorizaion object for a particular Transaction Code then the T.Code is SU24
Thanks & Regards
Shiva Vekat

What is standard authorization object for Personal development P_PLOG

Hi,
Recently i got a object in HR and i dont have any experince in HR.Could you guide me how to asssign standard authorisation object for the personal development p_plog? how to see the infotypes and what is the header field in innfotypes?

1-First of all the object is "PLOG" for personal planning. Theres no object with p_plog , most of time to maintain HR master we use object P_ORGIN.
2- You want to assign authorization for certain infotypes?
if yes, you have to go TR.PFCG and assign the authorization to that specific role.
Now you might have question , how youll will track down the roles against the authorization object .
Therere several ways , you can go to Tr.SUIM and find reports by user , roles etc.
You can also go SE16-> give table AGR_1251, give object and you can see the values in table.
After finding the suitable roles you can go to PFCG and assign the values to the roles.
As a good practice its better to create your OWN role Z:hrXXXX and assign it to users.
Hope thisll give you idea!!
P.S award the points.
Good luck
Thanks
Saquib Khan
"Knowledge comes but wisdom lingers!!"

What is the Authorization group in Cash Journal View Maintenance (FBCJC0)

Question 1: In Cash Journal View Maintenance (Tcode: FBCJC0), what is the Authorization group?
Question 2: How / Where can I define this Authorization group?
As per the F1 Help document in SAP :
The authorization group enables you protect access to certain objects.
In order to carry out a specific activity, the user must have authorization for the combination of the activity and the authorization group.

Hi,
Authorisation in Cash journal is meant for controlling of FBCJ transaction with an user ID.
For example, if you have a multiple cash book (Cash journal) or you are maintaining a cash book according to Business Area wise, Plant wise, etc.,
In this case, you don't want to allow the other people to view / transact your cash book, then you can assign some unique identification in the authorisation group column against the each of your cash journal.
These unique identification can be of any thing eg. 1001, 1002, 1ABC, ABC, etc., After this, the indentification has to be assigned in the respective user profiles in the below mentiond objects,
F_BKPF_BED
F_BKPF_BEK
F_BKPF_BES
F_BKPF_BLA
F_FBCJ
Hope it helps
Saravanan.A

PT60 the field Personnel Area( PERSA ) of the authorization object P_ORGIN

Hi,
When running transaction PT60 the field Personnel Area( PERSA ) of the authorization object P_ORGIN is not checked.
I have run SU24 ,the objects are there with chech indicator of authorization object = "CHECK".
What can I do about it ? Is there any note to fix this ?
thanks!
Olivia Yang

Hi,
In object P_ORGIN what you need to check for authorisation is it on Personnel area or PSA.Actually we have org.key for authorisation which is define in P_ORGIN.If you can define org. key as PA/PSA/EG/ESG you can check the authorisation for specific users.
Regards,
Snita

Error while generation of the Authorization object (

Hi Gurus,
I have created a Authorization object Z_CCTR3 for 0costcenter authorization.
but getting following error while generation of the Authorization object (type is Flat authorization)
"Error occurred when reading the data from DataStore object Z_CCTR3"
Any inputs will helpful...
Sonal.....

Hello everybody,
my problem is solved.For the UDConnect, whatever DATA SOURCES you create gets registered in a FUNCTION MODULE which has a capacity of only 99 enties, so to increase it implement the SAP NOTE 876340 - UDC Error available on SERVICE MARKET PLACE.
This problem occurs with BW version 3.5 level 17 or below.
Regards,
Priyanka
Edited by: Priyanka Joshi on Jun 10, 2008 11:03 AM

How to add function group to the authorization object S_RFC ?

Hi All,
Can you please tell you how to add the function group FG_DIAGLS_DATA_ENRICHMENT to the authorization object
S_RFC?
In solman_setup under basis configuration when I execute the step "SetupDPC/DCC Web Service URL" its getting failed because of the
following error which i found it in the agent log
"java.rmi.RemoteException:RfcExecutionException; nested exception is:
com.sap.sup.admin.abap.rfc.exception.RfcExecutionException: An
exceptionoccured during the execution of the function
'FM_DIAGLS_PUSH_PHYSICAL_HOST': RFC_NO_AUTHORITY >
com.sap.sup.admin.abap.rfc.exception.RfcExecutionException:An exception
occured during the execution of the function
'FM_DIAGLS_PUSH_PHYSICAL_HOST': RFC_NO_AUTHORITY >
com.sap.mw.jco.JCO$Exception:No RFC authorization for function module
FM_DIAGLS_PUSH_PHYSICAL_HOST. <Mid"
Thanks,
Satheesh E

Hi,
Please follow below steps:
1) Go to SE01
2) Click on create New workbench request and give desc once popup appears, Click Ok
3) Now open the trasport in edit mode
4) Add
Program ID - R3TR
Object Type - FUGR
Object name - Name of the Function group
>note that if you tranport Function group all the latest Function modules in function group along
>with screens will be included in the transport.
Regards
Shital
Formatted by: Vijay Babu Dudla on Apr 25, 2009 5:08 AM

What is the ODS object settings?

What is the ODS object settings?

Use
When creating and changing an ODS object, you can make the following settings:
BEx Reporting
With the BEx Reporting indicator, you determine whether the ODS object is immediately available for BEx queries. If the indicator is not set, no SIDs are generated for the new characteristics when the data in the ODS object is activated. This optimizes the performance of the activation process, but the ODS object is not available as an InfoProvider for queries. Turn the indicator off for all ODS objects that are only being used for further processing of data in other data targets or that are being used in InfoSets.
ODS Object Type
Select the ODS object type. You can choose between standard and transactional, whereby standard is pre-installed and transactional is only meant for special cases. You can switch the type as long as there is still no data in the ODS object.
See also Transactional ODS Objects.
Unique Data Records
With the Unique Data Records indicator, you determine whether only unique data records are to be updated to the ODS object. This means that you cannot load a data record into the ODS object the key combination for which already exists in the system u2013 otherwise a termination occurs. Only use this setting when you are sure that only unique data records are to be loaded into the ODS object (for example, single documents). A typical application of this is in the loading of mass data. It improves the load performance.
Note
You can also deselect this indicator again (even if data has already been loaded into the ODS object). This can be necessary if you want to re-post deleted data records using a repair request (see: Tab Page: Updating). In this case, you need to deselect the Unique Data Records indicator before posting the repair request, following which you can then reset the Unique Data Records indicator once more. The regeneration of metadata of the Export DataSource, which takes place when the ODS object is reactivated, has no effect on the existing data mart delta method.
Check Table for the InfoObject
Here the name of the InfoObject is displayed for which the ODS object is also the check table, if necessary. You can specify this when creating an InfoObject. See also Tab Page: Master Data/Texts in the InfoObject maintenance.
Automatically Setting Quality Status to OK
With this indicator, you can determine that the system automatically sets the quality status to OK after loading data into the ODS object. You should turn on this function. You should only deselect this indicator if you want to check the data after it has been loaded.
Automatically Activating the ODS Object Data
With this indicator, you can establish that the data that has Quality Status OK be transferred from the activation queue into the active data table, and that the change log is updated. Activation is carried out by a new job that is started after loading into an ODS object is complete. If the activation process terminates, there can be no automatic update.
Automatically Updating Data from the ODS Object
With this indicator, you can establish that the ODS object data be automatically updated. Once it has been activated, the data is updated in the data targets. An init. update is carried out automatically with the first update. If the activation process terminates, there can be no automatic update. The update is carried out by a new job that is started once activation is complete.
Note
Only activate automatic activation and updating if you can ensure that these processes do not overlap.
If you use process chains to guarantee serial processing of the process, these settings are not supported for the object (with the exception of setting the quality status). Then you have to include the automatic processes as process types in the process chain.
Also refer to the example for Including ODS Objects in Process Chains.

When we create a table maintenance generator what is the program object

When we create a table maintenance generator what is the program object
& What is the database object is being created?

check links
https://www.sdn.sap.com/irj/sdn/advancedsearch?query=use%20of%20table%20maintenance%20generator&cat=sdn_all
http://www.sapdevelopment.co.uk/tips/tips_tabmaint_tcode.htm
http://www.sap-img.com/abap/create-a-table-maintance-program-for-a-z-table.htm
http://help.sap.com/saphelp_nw04/helpdata/en/cf/21ed2d446011d189700000e8322d00/content.htm
Rewards if useful.....................
Minal

What is the program object is being created when we activate smartform?

What is the program object is being created when we activate smartform?

hi,
while activate the smart form, a function module is being created.
by using this function module we can pass the business data to the form.
in print program we can simply call the function module which has been created by smart form while it activate and pass required parameters to it.
for more information follow this link.
http://sap.niraj.tripod.com/id67.html
regards,
Ashok Reddy

Authorization object to restrict a particular customer code in a sales org

Hi,
I have a requirement whereby a sap user who is assigned to Sales organization A needs to access a particular customer from sales organization B. However the sap user has no access to sales organization B. However the requirement is such that the sap user cannot be given access to all the customers in Sales organization B. He must only access one particular customer from Sales organization B and not all the customers in Sales organization B.
The problem here is if we give the sap user access to Sales organization B, then the sap user can access all the customers in Sales organization B. So how can we give access only to a particular customer in the Sales organization B?
Is there any authorization object which can accomplish this?

Hi.
You can use The Authorization object
V_KNA1_VKO
Tcode for Authorization objects: SU21
Tcode for Authorization FIELDS: SU20
Statement to perform Auth. Check AUTHORITY-CHECK(See F1 HELP)
Reward if Helpful

What is the SNRO Object To maintain Course Groups

What is the SNRO Object To maintain Course Groups. Or is there a transaction?

All objects will be maintained at TNRO table, please check.
Thanks
Satyasuresh

ARQ: What is the authorization object to restrict system selection while creating a request???

Similar Messages

Maybe you are looking for