Authorisation Restrictions in PR05

Question

Hi Experts,
We want to restrict Authorisatons in t-code PR05 userwise ie.,
The scenario is  X user will created the Trvl Exp. in PR05 
Head-HR ( Y user) will approve the Trip ( only display)
Pre-Audit(Z User) will  Verify the Expense Voucher and Trip details do corrections if required, save & settle the Trip
Creater should not have Change
Approver should have only disply and approve
pre-audit only change and settle
Now how can I restrict Authorisation Userwise
Thanks in advance
Chaitra

Answer 1

Hi Chaitra
There is very good documentation for this so you should be achieve this via PFCG and the authorization objects P_TRAVL/F_TRAVL and  for the values for the authorization fields BUKRS, KOSTL, PERSA, PERSG, - remember though that the object P_ORIGINCON (structural authorization) is not checked in travel.
Values of the individual authorization fields:
The authorization field AUTHC
In the components HR and Travel Management (FI-TV) the authorization
level is defined using the field AUTHC. The following authorization
level values are possible:
Value  Authorization for
R      Read (display travel plans)
W     Maintain SAP data (create/change travel plans)
A      Approve travel plans
B      Book in connected reservation system
C      Book approved trips in connected reservation system
Q      Create trip templates
      All operations
You can only specify the values 'W', 'A', 'B' and 'C' together with 'R'
and you must specify the value 'Q' together with 'R' and 'W'.
The authorization field AUTHP
In the field AUTHP the value for the personnel number check must be
defined.
Value  Authorization for:
O      Own personnel number only
E       All personnel numbers except own
      All personnel numbers
If the authorizations in the AUTHP field have the value 'O' or 'E', theassignment user name/personnel number must be defined in the HR Infotype   0105 (communication), subtype 0001 (system user name SAP system).
Note 574467 will also help as BAdi for other requirements and please have a look at also at the following User Roles in PFCG.  You can see also the documentation in SAP Help->http://help.sap.com-> Financial Accounting->Travel Management->Roles in Travel Management.
   SAP_FI_TV_ADMINISTRATOR    Travel Management Administrator
   SAP_FI_TV_ADVANCE_PAYER    Trip Advance Payer
   SAP_FI_TV_MANAGER_GENERIC  Trip Approval Manager
   SAP_FI_TV_TRAVEL_ASSISTANT Travel Assistant
   SAP_FI_TV_TRAVELER         Traveler
   SAP_FI_TV_TRAVEL_MANAGER   Travel Manager
So for this if you assign the role of Traveler for the end user (creator) given them O and W authorizations only for the object and assign this to the role in PFCG, second person Trip approval manager role with E and A auth and 3rd advance payer role with whatever authorization is required.