Authorisation management

I want to restrict creation of BP to specific users .In my case , BPs with role employee only should have authorisation to Create or Edit Business partner .Can any one give me clear steps to achieve this ?
Thanks & Regards,
Ravi

Hi,
You can achive this using Authorization group. Define Authorization Group, Assign those authorization group to BP with respective user. Maintain these authorisation object in Basis Authorisation and then try to create BP.
This should solve your problem.
Regards
Arun Kumar

Similar Messages

HR Authorisation Management for different companies in the same client

Hi,
Could anyone please help in this....
My client has two companies. They want to restrict the authorisation to both the companies so that no one can see each other companies data and at the same time access tha data.
For Eg, there are two payroll officers, each in both the companies, If i give authorisation to run Payroll driver(PC00_M40_CALC), anyone of them can run payroll for any of the companies. (though,their Payroll area is different). There are many restrictions to be maintained like Maintance of Master data, Maintanance of OM structure as assignement of position, running Payroll, viewing the payslip etc...
How can this all be restricted so that, the respective companies can view and access their own data without interfering in to the other company.
I could only find object P_PYEVRUN which helps me restrict to view the created documents of posting for other company code.
Can anyone put light on how i should proceed further... I heard we can restrict HR master data, but what all i know is we can restrict at infotype level. My problem is, two persons should access PA30(each from different companies), but should not be able to edit other companies data.
Thanks
--Pranitha

Hi ,
If you are creating the another company undar the same client . then you can not use different no. range.
or if you are going different client for different compnay code then you can use different number range for material master.
SAM

User Authorisation - storage location

Hi,
we have three storeage location under one plant, can we restrict user to access only on UM1 storage location not to access balance two storage location.
Plant :    X70
Storage Location : UM1
                                UN1
                                UN2
Is it possibile to create a role only on storage location, please advice.
Regards,
Muthu

You will need to activate " Authorization Check for Storage Locations "
Storage location authorization means that a user has to have authorization for authorization object M_MSEG_LGO in order to enter a goods movement in the storage location, using a particular movement type. In the list of material documents, only the document items for which the user has a display authorization are displayed
Go to SPRO->Materials management ->Inventory management ->Authorisation management->Authorisation check for storage locations,

How to Block postings for WM managed storage location

Hi Experts,
The scenario is we want to block posting for all materials for a WM managed sloc. We cannot use Authorisation management due to some limitations. Please suggest any other way to do this.
Thanks

Thanks for your responses.
We are looking for an option where we do not have to do any configuration changes and flag for deletion or archive is not an option for us because it is just a temporary requirement. Moreover there are some technical limitations due to complexities in ALE so we cannot use MM06. Any other ways that anybody can think of?
Thanks

Authorisation: controlling access to objects/data

Hi all,
I am looking for some pointers to design patterns that deal with authorisation.
The issue at hand is the following: for an enterprise application we need to implement a mechanism that manages user-access to certain data. Example: if a user asks for sales-figures, only the data that he/she is allowed to see (e.g. based on office) should be included in the result.
The question that we asks ourselves is: do we set up a separate authorisation manager (sessionbean) that includes all the business logic to restrict user-access, or do we make the specific objects (entity beans) responsible for this.
The latter solution would take the form of: entitybean Office, getSalesFigures(Year, User) method; based on the User object access is granted or not. The method will return 0 if the user has no access.
Feedback is appreciated.
Regards,
Jaap

Hi,
The Composite View pattern http://java.sun.com/blueprints/corej2eepatterns/Patterns/CompositeView.html
has some discussion about applying security based on user roles.
Also the Intercepting Filter pattern
http://java.sun.com/blueprints/corej2eepatterns/Patterns/InterceptingFilter.html
can be used to apply security checks. The Java petstore applies this pattern for self-registration of users, and this is explained in more detail at
http://java.sun.com/blueprints/patterns/InterceptingFilter.html which includes an explantion of the pattern being applied, and also a link the details of its implementation at
http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/sample-app/sample-app1.3.1a3.html#wp1065478
These should give you a good starting point for designing role based security. The petstore used a seperate module for security because it was allowing self-registration of users. If your application does not allow users to create and manage their own user accounts(like yahoo mail etc) and instead all accounts are set up administratively(someone in the company sets up each user account), then the J2EE platform may provide the capabilities you require and you may not need to write a separate module.
The J2EE programming model also has a lot of support for role based security. So you may be able to leverage the J2EE environment to do much of the work for you. The J2EE security model is described in the security chapter of the BluePrints book at
http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/index.html
hope that helps,
Sean

Evaluation path - accessing of the direct employees by the manager.

Hello Experts,
I need to configure the evaluation path , using which the managers can access all the direct employees.
Can u all please help me with this.
It would be really helpful if u could suggest some documents to refer.
Your answers will definitely be awarded.
Thanks and Regards,
Pooja Dev

Hi...
you can creat the evalution path in IMG -> PM -> PA -> OM -> Basing setting -> evalution paths..
1. select the evaluation path and make the relationship between the objects..
2. test this in easy access under geneeral structures..
but if u want to assing that evaluation path to spcefic user, then u need to user structureal authorisation..
which is different from general authorisation management..
Best Regards
Samson

Delivery Completion in Sales order

Hi Experts,
By Activating delivery completion tick mark in sales order screen it suggest a warning message V1080:Customer wants the order to be delivered completely. I want to convert this Warning message into error . Also is it possible to give authorisation to this field only particular user can remove this tick mark.

Hi Byju4u,
For changing warning message into error message, take the help of an abapper to look into the function module of programme used and make your customised codings so that the error message can be changed.
Regarding authorisation, get the relevant field and define authorisation under the menupath in customisation,
spro > sap guide > sales and distribution > authorisation management > Define authorisation
Regards
R. Senthil Mareeswaran.

Create PO with zero value

Hi,
My requirement is to create a PO for Free of charge item. But the moment I copy my PR item to PO the FoC check box is greyed out and I am unable to make the procurement price as zero.
Fyi, My sales order line item is linked to wbs.
Do I need to do some additional configuration to allow creation of FoC PO line items?
can anyone help.
thanks

Sorry,
What I wanted to say is... You must work out your PR... IN SPRO:
Purchasing->Authorisation management->Define->Function
And unset the Adopt PO Price (create a new entry and name it if you don't have one).
Go to SU3 and set the parameter with the code you set previously in SPRO.
Still, this will no set any price in PO for this user.
Cheers.

PO item level validation if create with ref to contract

Hi
Pl help me to fulfill the following client requirement:
When user create the PO with ref to contract , system fetch the all data from the contract to PO at line item level, but in the PO, user is able to change the contract line item rate.
Now contract line item rate is already fixed with vendor & PO creator should not allowed change this rate.
Could you provide the any standard configuaration or development to restric the user to chage the PO line item rate if created with ref to contract
Pl give me replay as soon as possible as it is very urgent
Rgds
Nishit

Hi,
First you have to create a separate document type which is to be used for creation of PO referring a contract . Than define functional authorisation to buyers going by the menupath -Materials management > Purchasing > Authorisation management > Define function authorisations for buyers-Function Authorizations: Purchase Order. Here enter the field selection key of the new PO document type you created . Than check the box "Display Prices" . Uncheck all other boxes .You can check reference to Contract against possible reference Objects. Than save . Than in the User id enter the User parameter EFB and allocate the aparameter to the user . Also remove other document types of POs except the newly created document type in user authorisations. This will prevent change of price field in the specific document type.
Dhruba

PR mandatory for PO creation

Hi
Can any one tell me
To create a PO , PR is mandatory and also It should not Accepted manual creation of PO

Hi,
I am not sure if I understood your question.
If you are asking how you can control if a user can only create a PO if they are converting it from a requisition and at the same time allow other users to create POs without a requisition.
This is controlled by the EFB parameter.
Go to SPRO - MM > Purchasing > Authorisation management > Define Function Authorisations for buyers.
You will see all of the various flags available. Select one of the entries and add it as a parameter ID to the users you want to control (or create a new entry and add that if you can't find one with the correct flags).
This should work for you
Steve B

How to control users to revoke PO after partial GR

Dear All,
Users creating a PO and after PO has completely released and partial qty of goods receipt.
Few users revoking/canceling the release strategy how can I control.
Regards
Subhash

Hi Subhash,
This can be taken care by 'Authorisation management"
Contact your SAP BASIS team and ask them to make strict authorisation scenario,
In your case, revoke the access of user from making changes to a release strategy once the document is released.
Regards,
Pravin

PO data should not allow to change

Dear Forums,
Can any body so kind to find a way in solve the following business requirement:
In my client business scenario the PR only subjected to release. PO against the PR not go for any release.
My client require the user should not allow to change the data of PO which is pick from PR (PO created reference to PR).
For example : user should not allow to change the quantity in the PO which capture from PR while creating the PO reference to PR.
Your early reply should highly appreciated.
Regards,
sp sahu

Hi,
there is no standard way of doing this and I am not sure that it should be done.
How are you going to be able to correct errors and set deletion flags, delivery completerd flags etc. if the PO is blocked for change?
If you really want to do this then I would create a new document type that has the requisition reference field set to mandatory. This means that the document tyoe can ONLY be used for creating POs that refer to requisitions. Then change the field settings for this new PO document to display only in ME22n.
That way, POs that don't reference a requisition will use another PO document type that has the fields set to open for input in ME22n.
Would this do what you need to do?
You should also look at the EVO and EFB parameters and config (in the Purcashing config menu under environment data > Default values for buyers (the EVO paraneters are maintained here) The EFB parameter (the more powerful settings) is configured in the purchasing > Authorisation Management > Define function authorisations for buyers)
Read the configuration text help and note the flags and what they do.
Steve B

Info Record Mandatory for PO

Dear Experts,
We want the implementation of the system for generating PO/rejection document with the help of Info Record.
My requirement is as below.-
1.Freeze the INFO record .
2.While generating PO / Rejection document , it should pick the Price from INFO records.
3.No one should be able to punch the Price Manually.
4.If any change of Price is required , it should be done by some authorized Person.
Best Regards
Deepak Rade
Note : Please search forum before posting as subject is already discussed widely and solutions
were widely available,Please post only specific requirements which is not addressed.
Edited by: Jeyakanthan A on Dec 22, 2011 9:04 PM

Hi,
You can do this by creating authorization object for the purchase order. Create the selection variant for the purchase order. in the selection variant, make the price field as display only.
The path is:
IMG-> Materials management -> purchasing -> purchase order -> define screen layout at document level
Once this is done, assign the selection variant to authorization parameter.
The path is:
IMG -> Materials management ->authorisation management -> define function authorisation for buyers -> function authorisations : purchase orders
This authorization parameter will be assigned to all the users except a few; and those persons to whom this parameter is not assigned, will be able to make price change in the purchase order.
Regards,
Nisha

Adopt net price from contract if po created with referance to contract

Hi expertise,
Can any body so kind to find a way for the below requirement of my client:
When PO is created with reference to contract, the net price of PO should be adopted from the contract & user should not allowed to change the net price of that PO (but allowed to change the quantity).
Your earlier answer should be highly appreciated.
Regards,
Sp sahu

Hi,
You should make use of two very helpful options in SAP.
They are known as the EVO parameter and the EFB parameter. These control what the user can do when generating .
You configure a combination of flags on each parameter and so control things like "can prices be changed", can the user ONLY create by referencing a document (contract or req etc.)
They are configured in the following menu path on SPRO
Materials management > Purchasing > Environment data > define default values for buyers.
This is the EVO parameter it is well worth reading the help text on the config for this. It explains that you have to then add a parameter (EVO) to the userid (in the normal way that they maintain their userid , or via the config).
The EVO parametr is quite useful but the EFB parameter is even better, this conttrols what the user can do.
The menu path for the EFB is
Materials management > Purchasing > Authorisation management > Define function authorisations for buyers.
This is the one that will help with your problem. It works like the EVO parameter and so you add the EVO parameter to the userid and give it the code that relates to one that you have configured (careful the system is case sensitive for these codes, so use upper case or numbers for the codes when you configure them)
In the EFB config switch on or off the flags that you want (in your case switch OFF the enter conditions and it may help to use an appropriate field selection reference key that makes the fields display only.
Then when you allocate this parameter to the userid the settings will apply.
try them out in your play client, they are VERY useful, especially the EFB parameter.
Steve B

How to block all goods movements incurs to a warehouse?

Hi all,
I am wondering if you can provide me a way, a transaction code on how to perform the following?
How to block all goods movements incurs to a warehouse.
I am trying to execute LX23 (Stock comparison IM/WM) and try to remove the differences using batch input file.
SAP document indicates the prerequisite to use this feature is that all inventory movements to the warehouse be blocked before clearing the differences (i.e. adapt the IM figure to that of WM figure).
Appreciates.
Daniel

I think the requirement here is to block inventory movement (GR, GI, PCN etc.) to storage locations which are connected to your warehouse. Blocking movement on storage types in your warehouse does not serve this purpose.
Is it really necessary to block inventory movement when running LX2? LX23 eventually will need to correct the stock via IM posting at the end.
Anyway, if storage location level authorisation check is not currently in use in your system (OLMB -> Authorisation Management -> Authorisation check on storage location), you may try to activate authorisation check on storage locations connected to your warehouse so that those who has no M_MSEG_LGO assigned won't be able to post inventory movement to the warehouse.

Authorisation management

Similar Messages

Maybe you are looking for