Authorization according to user status

Hi All,
Greetings of the day.
I want to authorize user only for particular user status. He can change that user status. how is it possible. kindly help

Hi Peter,
Auth Object B_USERSTAT can be used to control the access via user status.
Do consult with your security team, they will be able to assist you further.
Thanks
Terence

Similar Messages

No authorization for activating user status PLIM

Dear Gurus,
I'm a newbie to SAP. Currently i'm facing the problem with Tcode KO01 while i'mtrying to create Internal Order. I can initialize the program but after i entered the Order type and pressed enter. Error msg "No authorization for activationg user status PLIM" pop-up. Pls help on this urgently.
Thanks.

Dear Payal,
I checked /nSU53 just after i got the error msg. It said authorization check failed. Authorizaton object B_USERST_T status management: Set/Delete User Status using Transaction.
Activity:01
Authorization key: <Dummy>
Object Catagory: ORC
Status Profile: 00000002
What should i do after this???

WorkCenter : Managment of Authorization Keys and user status

Hi friends,
This is regarding Solution Manager 7.0 Service Desk (Work Center).
Using authorization key in B_USERSTAT in SAP_SUPPDESK_PROCESS role, I configured two categories of users :
1 - First category (User1) can process the message and access to the standard Status profile (SLFC0001),
2 - The second category (User2) can process the message using status profile (SLFC0001) with some limitations : for example User2 mustn't access to the "Send to SAP" user status.
My configuration works correctly whit SAPGUI (CRM_DNO_MONITOR).
Unfortunately, it doesn't work when I attempt to process message using Work center : In Work Center the system ignore the authorization key. Therefore, the User2 can access to all user status including "Send to SAP".
HOW CAN I resolve this issue?????
Thanks for your help,
Samad

Hello Christian,
In our company, some processors (User2) have not the authorization to send the messages to SAP. So they must not access to 'Sent to SAP' status.
To do this :
1 - I configured ZSLF001 like below :
     AFAK     Sent Automatically to SAP
     ESKL     *****Escalated
10*****NEW     *****        New          *****                                 SLFN
15     *****SND1     *****Sent to Support        *****                   SLFN
17     ****PROC****     in Process              *****                     SLFN
20     *****AEGS     *****Sent to Ext. Provider     *****              SLFN
25*****     SAP1     *****Sent to SAP     *****                      ZSLF
30     ****CACT****     Author Action        *****                   SLFN
50     *****SPRV     ****Proposed Solution****                   SLFN
60*****     CONF*****     Confirmed
2 - I configured the B_USERSTAT of User1 like below :
Activity : 01, 06
Authorization key : ' ', SLFN, ZSLF
Object Category : *
Status Profile : *
3 - I configured the B_USERSTAT of User2 like below :
Activity : 01, 06
Authorization key : ' ', SLFN
Object Category : *
Status Profile : *
Using 'CRM_DNO_MONITOR' it works correctly : when User2 edit the support message, he can not access to 'Sent to SAP' status. This is normal
Using WorkCenter, the User2 can access to 'Sent to SAP' status!!!!!!
Thanks
Best regards
Samad

CRM user status in delta not extracted

Hi,
In the delta load of datasource 0CRM_SRV_CONTRACT_H the custom added user status fields are not filled.
For extracting CRM (5.0) user statusses of Service Contract Business Transactions to BW (3.5) I did required CRM customizing in SBIW and appended extraction structure with fields and did Bdoc mapping in BWA5 (customizing CRM_BWA_MBDOC BAdI not required according SAP user status logic). The custom user status fields are defined as BWSTONE<i>xyz</i>.
Full load works fine, but in delta load the user status is not filled. It appears that the delta messages in the delta queue (RSA7) do not contain the user status, even when the delta is triggered by a user status change only.
Has anyone an idea what the problem can be? Or better: how to solve?
Thanks in advantage!
Kind regards,
Marinus

Note 793986 may help (at least in my case, even parallel processing is not used!).

System Status and User Status

HI Team,
Is there any way by which i can hide or make in display mode my user and system status icon in PM order, which i can do in notification.
Thanx in advance

To the best of my knowledge, you can not hide the Icon. But you can restrict the user not to change the status by Authorization key.
For User status:-
Create keys by
SPRO setting
Plant Maintenance and Customer Service >Master Data in Plant Maintenance and Customer Service>Basic Settings-->Create Authorization Keys for User Status Authorizations
Assign this keys to your user statuses. Basis will use it for user roles.
As the System statuses changed by the business transactions, need to find the authorization object (BASIS) and restrict the user.
[Useful Info|http://www.sapfans.com/forums/viewtopic.php?p=823900].
Babu

Need authorization for business document services attachment list with user status in ps claim for clm2 and clm3

Dear Friends,
client wants to restrict the attachment list changing, deletion after the user status sets to close in PS Claims for transaction clm2 and clm3.
Currently any one can attach documents as GOS and delete even the claim is completed and status is closed.
How can we restrict all users even who created the claim can not change create and delete attachment list documents once the claim is completed and approved and user status sets to closed.

HI,
what is the claim creation transaction in that 01 is for creation 02 is for edit and 03 for display so with the help of basis consultant you can assigned transaction in user's assigned role accordingly.
But user who is authorize for create claim can not modified or edit once he save the job. this would be limitation.
Regards,
Sanjeev

Checking authorization of user status

Hej there!
In our CRM-system I would like to check whether a user has authorization to set a particular user status in a servicecontract.
I know it is possible to check whether a user is authorised for a status scheme via object S_USERSTAT, but I can't find an authorization object which checks on a particular value within the status scheme.
Is it possible to make such a check via an authorization object or BADI or ....???
Regards,
Henry Helderop

Hi Henry,
I have no access to a CRM system.
In other systems like R/3 or APO user status are handled with object B_USERSTAT or B_USERST_T.
There you can check on values for
o activity
o authorization key
o object type
o status profile
maybe this is the way to restrict the access to service contracts.
Regards
Ferdi

Authorization for changing the user status

Hi all,
I need to give authorization in such a way that after the initiator has creataed a DIR...:
1. When it goes to the next approval, the person should be only able to change the user status and save.
he should not be allowed to change anything else.
I have tried using different authorization objects but none of them worked. Is there any tcode in DMS for just approving the DIR (changing it to next available user status), similar to release strategy. For ex ME29N for approval of PO (Purchase order) ?
Thanks
Anish

Hi Anish,
Based on your requirement, I would like to suggest to go by workflow to approve the document..
With the help of workflow, you can approve the document in workflow inbox itself (workitem), no need to go to DIR, the status will get automatically change in the DIR.
for this you have to use function mudule (set/get next status).
you can do this by taking the help of Workflow consultant and abap.
regards,
nitin
award point if useful

PM order user status authorization

Hi Experts,
How can i give authorization to user status of PM Order ?
I want to give authorization for different activites as below.
for example i only want authorization for 01 and 04. Is this possible?
01 ACLD
02 BASL
03 MABE
04 ISBE
05 MIBE
thanks.

Hi,
In addition to Narasimhan & Wendy told, follow these steps
Activities
1. create authorization keys in BS52
2. Create User Statuses & assign to Maintenance Order Object types in OIBS
3. Assign the authorization key to one or more user statuses in your status profile.
4. Assign these User Statuses to Order Types in OIOG
5. Define corresponding authorizations and include them in the relevant authorization profiles.
6. Assign these Authorisation Profiles to the User groups in SU01 under Profiles sub screen.
Regards,
Maheswaran.

User status with authorization key

Good day experts!
I have user status schema with users status. Each status have Z authorization key. I add authorization object B_USERSTAT in my SRM role. But SAVE rfx or choose user status in "user-specified status" not react on my auth key.
How can i limit user status for my role?

Hi,
In user status per status there is a auth. code field. So the user needs to be authorized to set or delete the status if a auth. code is maintained for the status.
The object is B_USERSTAT. Give your specifications to your basis person & it should be possible.
Hope the above clarifies.
Regards,
Vivek

For Budget release / supplement User status

Hi Experts,
In project i m using a user status for taking approval / release budget .
Description                   Lower                         Highest
initial                               1                                   2
bud planning                   2                                  3
bud release                    3                                  4
release                           4                                  5
execution                       5                                  5
Here, after getting approval / Release budget i have to change staus manually (based on authorization).
Now here i want that when i add supplement budget then once again system should go on bud planning and authorized person change the status (from bud planning to bud release).
For this in OK02 i had set Bud Supplement on Bud Planning. (According to that while budget is supplement then status go back on bud planning).
Here i m little bit confused that wt level i have to select here between lower and highest. (i m taking the same level as shown above)
While testing this, i m not getting the required ans..
pls suggest me if i m doing something wrong.
Regards,

Hi,
Description Lower Highest
initial 1 2
bud planning 2 3
bud release 3 4
release 4 5
execution 5 5
Please understand this, if you want to move form bud release to bud planning, then lower limit of bud release should be 2 not 3.
as per your settings system would not move from one status to its previous status.
Lower limit is what ever the status number it scan move backwards, understand this basic concept & apply it as per your requirement, I have just explained one scenario here.
Thanks
SL

Use of user status and business actions

Hi all,
I'm new at status profiles, user status and business actions.
Currently we are using status profiles and user status for orders - but business actions aren't assigned to the user status. In a project I should evaluate whether we can use those business actions.
After reading a lot of documentations there is still one question left. What are the business-actions for and how can I use them?
Let's say I've a status profile with following user status with according business actions:
- status: new;   business action: to progress
- status: in progress;   business action: to confirm
- status: confirmed;   business action: decline or close
- status: closed;   business action: close
What happens when a user sets the status of an order to "confirmed"? Will be done additional checks for my order? - If yes: Wich checks will be done and exists there an API to effect these checks or to implement additional checks?
Regards,
Christian

Christian;
If you´re wanting to speak about Status Profile in OP. You can execute whole theses steps in T-code BS02, when in this IMG:
1. Enter a Status Profile.
2. Assign the status profile to an Object Type.
3. Define the User Status.
4. Assign Business Transactions to user statuses.
5. Translate the status profile and user statuses.
You can also to use this function to simulate the status development for a particular object.
To do this, select a status profile and branch to the screen "Allowed Object Types". Then place the cursor on one of the object types.
Using the function Extras -> Status simulation, you can simulate the status changes that could be caused by performing various business transactions, or by changing the staus manually, during the lifetime of the object concerned.
You can also branch directly from simulation to status maintenance for the object concerned, to display information on which transactions are allowed or disallowed in the current situation.
The log function records all the changes you simulate and allows you to navigate freely to see what effects these are having.
Status profile info
Using the function Extras -> Status profile info, you can display a list of all the entries you have made for a particular status profile. The list is structured as follows:
The first block contains the permitted object types.
The second block contains the user statuses.
The third block contains the following information for each user status:
which transactions it allows
which transactions it allows with a warning
which transactions it disallows.
I hope help to you
Regards
Luciano Nobrega

How to generate a report from crm table to find out user status changes

Dear all,
Could you please help me on generating a report from SAP CRM table level
to find out user status changes in crm orders for a specific period of time?
Thanks in advance,
Regards,
Shaik

Hi Shaik.
You would not need to write report for this. You need to create a Table view mainenance for the CRMD_ORDERADM_H or CRMD_ORDERADM_I for whichever you need.
Follow the below or search on google for more on table view maintenance.
Go to SE11, give the table name and click on change. Then Go to utilities--> Table maintenance generator.
In the table maintenance generator screen, you should give Authorization Group,
Function Group name (Function Group name can be same as table name),
Maintenance type can be one step or two step, usually you will create with one
step. You should give maintenance screen number. After clicking on create button,
a table maintenance generator will be created.
To check it go to SM30 . In SM30, you find display, Maintain options.
You can view the table contents by choosing Display and supplying the selection criteria of dates.
Regards
Apoorva

User status in sales orders

Hi all!
Can anyone tell me if there is a way to control the possibility of changing a sales order through the status?
I wanted that when a sales order reaches a certain user status, for it to be blocked to modifications, as if it was display only...
Thanks!!!
Best Regards,
Carina Maeiro

Hi Carina,
Requirement is strange, but still may be possible,.
Can you give some more info like..
1. all the users have to be blocked or only particular user?
2. what wud be the next flow processing of tht order ? like after blocking what you wanna do ? want to raise a message or ?
Some Work arounds for the above 2 scenarios wud be.....
1. if a set of users have to be blocked, its very much possible thru customization like, you can define status Authorization keys in Status Management in SPRO where u will be setting the auth key for the user profile
2. if you want to just block the user not to go ahead i e atleast he shudnt save the order, you can implement CRM_ORDER_STATUS Badi in which you have to raise a error message on the application log saying tht it cannot be saved for so and so reason
if this solves..coool ....if not tell me the exact scenario ..
Siva

Restriction of user status in service order for billing due list

Dear CRM Experts,
I have configured status profile for service order as OPEN,INPROCESS and Completed and have assigned this to the service order transaction type.
Now once i save a service order without errors ,the system is automatically generating abilling document in billing due list TX:BEA_DL_01 even though the user status assigned to it is OPEN ,INPROCESS AND COMPLETED.
According to our client requirement ,a billing document has to be created in Billing due list if the User status assigned to it is COMPLETED only.
Please suggest the solution.
Bye,
Madhav

Hi Nanda,
As per your last reply, for some Service Orders you are unable to change the Status. Can you have check whether those service Orders are error free?
Sometimes, when there are errors in service orders or in 1Orders you cannot change the status from In Process or Open even when you have released certain Items.
Hope this helps.
Thanks,
Samantak.

Authorization according to user status

Similar Messages

Maybe you are looking for