Assigning authorization group to users or roles.

Hi
How do I assign authorization group I created for ECM digital signature approval to users

Hi,
Provide the authorization group and the role details to which it needs to be linked to your basis team and they should be able to do this for you.
Regards
Sreekanth

Similar Messages

Assigning Group(of users) to Role when starting a process programmatically

Hi All,
I m starting a process programmatically(using startProcess()).
Process initiation is working fine, but i need to assign a 'Group' to the role, and not a user. It is a portal group, available at portal end only. How can this be done?
Please guide.
Thanks and Regards,
Sakshi

you can use the following code
import com.sap.caf.eu.gp.process.api.GPProcessFactory;
import com.sap.caf.eu.gp.process.api.IGPProcess;
import com.sap.caf.eu.gp.process.rt.api.IGPProcessRoleInstanceList;
import com.sap.caf.eu.gp.process.rt.api.IGPRuntimeManager;
import com.sap.security.api.IUser;
public void startProcess( java.lang.String processId )
   // retrieve the Runtime Manager
   IGPRuntimeManager rtm = GPProcessFactory.getRuntimeManager();
   // create an empty role assignment list
   IGPProcessRoleInstanceList roles = rtm.createProcessRoleInstanceList();
   // get the process role number
   int rolenum = process.getRoleInfoCount();
   // iterate over the required roles
   for (int i = 0; i < rolenum; i++) {
      // create a new role instance by specifying the role's unique name
      IGPProcessRoleInstance roleInstance = roles. createProcessRoleInstance(process.getRoleInfo(i).getRoleName());
      // add a user to the role instance
      roleInstance.addUser(roleUser);
      // add the new role to the assignment list
      roles.addProcessRoleInstance(roleInstance);
Thanks and Regards
shanto aloor

Assigning Authorization group to ZTcode

Hi All,
I have created one Authorization group to one Zprogram by running the program RSCSAUTH and want to assign it to custom ZTcode.
But if we go to SE93 there it asking Authorization object, wt is Auth.object and how can i assign Auth.group to ZTcode.
Anybody help me in this....
Balu.
Edited by: Bala Chandar on Sep 2, 2008 4:46 PM
Edited by: Bala Chandar on Sep 2, 2008 5:01 PM

How can i create a role and assign Auth.object to it using PFCG tcode, can u explain in detail plz..
We can create Auth.object from SU21.than assign Auth.object to specific role which can be maintain with PFCG.Often we need not to create many roles as SAP already provide Roles we just need to use them and assign to our Authorization obj which created by SU21
For more help just go thru SAP help which is already there for PFCG just press Ctrl+F3 in PFCG.
Amit.

Assigning Material Group per User

Hi SAP Experts! =)
Pls Help! does anybody have an idea how can I assign a Material Group per User. This is for authorization purposes. What I just know, is to Assign just one Material Group per user through Parameter ID MKL. This will only solve my problem if a User will only have access for a Single Material Group.
Do you know a way how to Assign access for Multiple Material Groups? I would want to use this for the PR/PO process, so a User will only purchase Materials under his/her assigned Material Groups. =)
Mik

HI,
Usually we give a star symbol for the authorisation object of material groups means the user is authorised for all the material groups.
In case if you want to give multiple material groups for the user then we have to specify the material groups instaed of the star symbol.
You can check the users authorisaion against the user ID in tcode SUIM.(Users with complex selection)
Thanks & Regards,
Kiran

Assign authorization group to transaction

Hi,
I have to assign a auth group to Z-transaction. How can i do this.
Thanks,

Hi,
What type of paramater transaction you have created? Have you created a paramater transaction for a view or a table?
I think when you create a parameter transaction the authorization is controled from the parent transaction and not in the tcode definition.
You can use S_TCODE to assign the paraeter transaction to any user and control it based on the user profile.
Cheers
VJ

Authorization group in Marekting planner

Hi
There ia a field 'Authorization group' in the basic tab while creating a marketing plan. Now, this authorization group decides which all users can perform particular actions on this marketing plan like change, display etc. So this authorization group must have some users attached to it. Moreover these users must be having their own authorization objects under role maintenance. So how can a particular user have limited access just on the basis of this group. Is this group having some atauthorization objects under it, if yes then where? My question is where do we assign the users to this group. Any pointers will be helpful.

Sunil Sir,
Authorization Groups are defined in SPRO under Cross Applications Comp ->SAP B P ->Basic Settings ->Authorization Mgmt ->Maintain Author Grps.
And you assign Authorization groups to each relevant Business Partner. while creating a BP you can assign auth. gp under Identification tab.
if you r satisfied with the answer pls assign the reward points i will be opening my account with your valued points
good to c ur msg..
cheers!
Rishi

Authorization Groups and table TBRG

In our system we have tables which are using custom authorization group ZEXC. I am looking at this via SE11 Table Maintenance Generator or SE54 Assign Authorization Group.
I can also see that it is assigned to roles by using SUIM -->Roles-->By Authorization values -->entry auth object (S_TABU_DIS) and click on entry values.
What I am not seeing is that the authorization group is defined in table TBRG.
So my question is.... An authorization group does not need to be defined in order to attach it to a table or assign it to a role? If the authorization group was created then deleted is it still valid to have it attached to tables and roles?

Hi Sharon,
Assign the authorization to user and make it inactive mode.Then authorization will be deactived to tat particular user's.

Check available authorization groups

Hi ,
if a custom table needs to be assigned to an authorization group in SAP.
Which is the transaction to check users assigned to an authorization group?
Currently i have an idea that Assigning and Creating authorization groups are dealt in SE54 but i cannot find a way to check
whether users are assigned to an authorization group...!!!
thanks
kritika

Checking Assignment of Authorization Groups to Tables:
You can also assign authorization groups to tables to avoid users accessing tables using general access tools (such as transaction SE16). A user requires not only authorization to execute the tool, but must also have authorization to be permitted to access tables with the relevant group assignments. For this case, we deliver tables with predefined assignments to authorization groups. The assignments are defined in table TDDAT; the checked authorization object is S_TABU_DIS.
You can assign a table to authorization group Z000. (Use transaction SM30 for table TDDAT) A user that wants to access this table must have authorization object S_TABU_DIS in his or her profile with the value Z000 in the field DICBERCLS (authorization group for ABAP Dictionary objects).
See also:
· SAP Notes 7642, 20534, 23342, 33154, and 67766
· Documentation for RSCSAUTH
Hope this helps.... if not check the following link
If you still don't find, search google 'table authorization groups in sap' - There are good info on web.
You can assign the authorization group to any custom table via SE11 - table - display - utilities - assign authorization group and rest follow the sap help (where to maintain and how to assign) .This is a developer and security persons work.

How to create authorization groups for G/L Accounting

Hi:
I have a problem with authorizations groups in FI, I hope you could help me.
We want to control access to accounting in FI by authorization group so user only can work with some G/L accounts.
I have seen in transaction FS00, in control data tab, a field called Auth. Group, but I really donu2019t know if this is the right field.
Do you know how I can control access to G/L Accounts by Authorization Groups? Perhaps must I to create a new Authorization Group by roles? We have 4.6c.
Please, any help is welcome.
Thanks in advance.

Hi
Update the authorization group field in the GL master with any user defined value and then include the same in the respective user roles against the authorization object - F_BKPF_BES-BRGRU in PFCG
Ensure you have updated 'Authorization group' for the GL accounts in your chart of accounts
Thank You,

Multiple Authorization groups to be used in OB52 for a single company code

Hello All,
I need help in creating and assigning authorization groups in Transaction Code: OB52 to control the postings of few users in one authorization group. That is i want some users to post in 2 back period and others in only 1 back period.I have tried from my side and it is still not working.
I followed the following step:
I have created 2 groups and assigned the users accordingly but the thing is i am only able to find 1 feild for entering authorization group
If there is any thing i am missing or if i have done some thing wrong in this process please help me.
Please Provide me the logic of how to use two authorization groups with one feild.
Best Regards,
Ravi
Edited by: Ravi Eddhula Reddy Kumar on Apr 3, 2011 1:01 PM

Hi,
Try with this possibility
In ob52 create two rows.
Assign the required periods for Group A in Row 1
Assign the required periods for Groub b in Row 2
Regards
Prasad

Authorization group,function group

friends while creating a table maintenance view it's asking authorization group
and function group ,what are those things and what to provide there.plesae tell me
in detail.

Hi,
You can assign authorization groups to tables to avoid users accessing tables using general access tools (such as transaction SE16). A user requires not only authorization to execute the tool, but must also have authorization to be permitted to access tables with the relevant group assignments. For this case, we deliver tables with predefined assignments to authorization groups. The assignments are defined in table TDDAT; the checked authorization object is S_TABU_DIS.
You can assign a table to authorization group Z000. (Use transaction SM30 for table TDDAT) A user that wants to access this table must have authorization object S_TABU_DIS in his or her profile with the value Z000 in the field DICBERCLS (authorization group for ABAP Dictionary objects).
Function group to which the maintenance modules are to belong. One function group can contain maintenance modules for several tables or views.
Authorization group
Maintenance type (one or two-step)
Maintenance screen(s) (one or two-step maintenance type, resp.) numbers
Regards,
Ferry Lianto

OBA3 (Customer / Vendor Tolerance) and OBA4 (FI Tolerancde Group for User)

Hi Expert,
With reference to the subject of this post, could anyone can highlight to me the actual difference between these 2 tolerance settings?
I use OBA4 to set the payment different for cash discount and payment differences, and it works.
Therefore, I wonder what is the main functions for OBA3? Any inter-relation between this 2 tolerance settings?
Both settings also have the section of "Permitted payment difference"...
In OBA3, the help files says that ... "In this step, you specify the tolerances for vendors. These tolerances are used for dealing with differences in payment and residual items which can occur during payment settlement..."
Kindly advise.
Thanks and regards,
Sbmel

Thanks for the fast reply.
Therefore, technically to say that if I want to limit the cash discount given or received, from vendor/customer, I can just create "OBA4 setup user wise, and you assign this group to user" ... and from this settings, I just need to create:
Group: <Blank>
Company Code: My desired company code
Currency: company code currency (defaulted per company code)
Cash Discount per line item to: 0
and at the permitted payment difference section:
Revenue: Cash discount adj to: 0
Expense: Cash discount adj to: 0
Right?
Thanks
Sbmel

How to find tables contain in particular authorization group.

hi all
        By using SE11 , i just enter a table name like "MARA"
         then i go for display
        then by clicking utilities->assign authorization group
          i can get the info. about tablename and which authorization group(MM) the table belongs and its desc.
my question is if the Authorization group is MM, i need to know the list of tables belongs to that particular auth. group.
regards
pras

Hi Pras,
These are stoed in table TDDAT. you can use se16 for this table and enter MM in CCLASS field hit execute.
Ravi
[My SAP Blog|http://raviinsap.blogspot.com]

Is there any BAPI or FM to authorization object to user in ABAP program??

Hi guys.
           My requirment is to assign authorization object to user in ABAP program,is there any FM OR Bapi to do this?

Hai ,
In order to do the authority check in the program ,   in your report at selection-screen event   you need to check for the corresponding authority output .
example :
T SELECTION-SCREEN ON p_carrid.
IF p_carrid IS INITIAL.
    MESSAGE 'Please enter a value' TYPE 'E'.
ENDIF.
AUTHORITY-CHECK OBJECT 'S_CARRID'
                      ID 'CARRID' FIELD p_carrid
                      ID 'ACTVT' FIELD '03'.
Regards,
K.VinayKumar

ACF2 Scripted Host Adapter | Add groups to users

I am exploring options to provision to ACF2. We need to assign ACF2 groups to users and the ACF2 resource (or mainframes) behave different from other resources. Users get assigned into groups rather than groups getting added to the user.
To accommodate this we plan to use the ScriptedHost adapter and write a ResourceAction Update script to actually add the user to the group requested. The side effect to this approach is that we now need to code scripts for all other actions like create, delete, disable, enable etc.. Is this how everybody does it - or is there a better approach? I am thinking around the lines of after actions with an ACF2 adapter...
Also - once you create the scripts as resource actions in the ScriptedHost adapter, do we have control to call them whenever we like - or are they automatically triggered - like the Create resourceaction script is called when a user is assigned the scriptedhost as a resource. So apart from configuring the different script names in the ScriptedHost resource wizard, nothing else needs to be done to make the provisioning work with the ACF2 resource?
And is the order of script execution automatically maintained - like Login action is called first before the Create action and finally the Logoff action.
Thanks in advance.

Hey Anokun,
I am reading up on how to create Scripted Host Adapters. I will be creating 13 of them soon. I have looked over all the docs I could find and am still a little bit lost. I think that the samplescreenactions can be used as a template. I'm still not quite sure how to go about creating these actual Adapters. I would was wondering if you had an example of a scripted host adapter you had that you could share with me.
Thanks,
Nik

Assigning authorization group to users or roles.

Similar Messages

Maybe you are looking for