Authorization based on personnel subarea

Hi All
I have to set up an authorization for my HR users restricted upon their location of work. I have set up personnel subarea for the same. However, am not able to find the personnel subarea object in the profile generator screen for the role.
For reference
PA               PSA
Corporate      Gurgaon
Plants           Panoli
                    Udaipur
                    Jammu
Marketing      All Marketing Locations
I want to set up an authorization for user to only be able to access Plants -> Panoli data
Please advice
Regards
Lokesh Gupta

hi,
Have a look at this pdf.It may help u.
http://www.sap-press.de/download/dateien/726/sappress_authorization_system_engl.pdf
http://wiki.ittoolbox.com/index.php/SAP_HR_-_Check_your_basics-Answers-1#DATA_AND_AUTHORIZATIONS
cheers,
Manoj.

Similar Messages

Regarding the authorization based on persinal subarea

dear experts,
                  my company has two offices what we want that in HR that one offices will not see the live datas of another office,for this we have two subarea raipur & raigarh what i did that in the authorization object P_ORGIN i added subarea BTRTL after this whenever i go to "SU01" & assign in the roles it gives THIS error------
*Authorization default values of transaction PC00_M01_CDTB for object P_ORGIN
inconsistent*
WHAT IS THE SOLUTION FOR THIS PROBLEM...
PLEASE suggest me how to restrict the authorization on personal subarea...
Also after adding the fields BTRTL in the object P_ORGIN   i want to remove it again how will i do this......

hi,
Have a look at this pdf.It may help u.
http://www.sap-press.de/download/dateien/726/sappress_authorization_system_engl.pdf
http://wiki.ittoolbox.com/index.php/SAP_HR_-_Check_your_basics-Answers-1#DATA_AND_AUTHORIZATIONS
cheers,
Manoj.

Authorization check based on personnel sub area

Dear experts,
         I would like to know if there's a way to do the authorization checking based on personnel subarea? Currently we can perform the authorization check up to Personnel Area only in P_ORGIN.
          Please advice.
          Thanks in advance.
Regards,
Yen

The feature Administrator groups (PINCH) is designed to deal with such a situation.
Example
Administrator A is responsible for personnel areas 1 and 2, Administrator B is responsible for the employee subgroups X and Y within personnel area 3, Administrator C is responsible for all other employee subgroups within personnel area 3.

How to get personnel numbers based on personal subarea?

Hi Experts,
Please give me the fuction module name to get the personnel numbers list based on personal subarea wise.
Best regards,
Narasimha.

Hi experts,
i dont want to write select queries . I am enhancing the standard . So we are looking for FM.
'RP_CHECK_PERNR' - This function module is giving the personnel subarea as the exporting parameter and pernr as the importing parameter. But i want personnel subarea as the importing parameter and pernr as the exporting parameter.
please let me know how to process the same.
Best regards,
Narasimha.

Sample Data Used in Personnel Subarea and Employee Subgroup

Hi HR Guru,
Can anyone give me some sample values you used in Personnel Subarea and employee Subgroup? Our company is looking into HR implementation. We just wondered how other SAP customer's configuration for this field.
Thanks!
RL

Hi Reiling,
There are plenty of threads here that describe the concept of personnel area/subarea, employee group/subgroup. You can also check SAP documentation.
Based on that and your organization set up you should be able to chalk out the personnel structure.
Donnie

Personnel subarea

dear all
when i create personnel area there are button called address if i need to maintain extra information like address ,name 1,name 2 ,telefone number...etc this button isnot found in personnel subarea is this possible to add it?

Hi Raul,
1st we have created one table called location table which contains columns MOLGA, PSA code, PSA Desc, Market unit which was client requirement and Address number which is sequence number for PSA. We can maintain manually.
Then we have created another table which is called address table and address is stored in this table based on sequence number.
Then we have created a new subtype for address infotype which will display address based on PSA. In this sub type all fields are display mode only. 1st system will find out PSA > based on PSA what sequence number from location table > which address for this sequence number from Address table.
Hope this will help.
Regards,
Purnima

Personnel Subarea groupings for a multiple country system

We have more than 70 countries in our SAP system and more coming to be rolled out. We mainly use the HR funtionality for time recording. So, for the configuration of personnel subarea groupings in Time Recording we used the country grouping: e.g. Singapore Molga = 25, MOABW = 25, MOVER = 25, etc. For the 'SAP-countries (countries for which SAP has a template) we use MOLGA as personnel subarea grouping, for the NON-SAP countries (countries for which SAP has no template) we use a 2 digit number downwards from 98. Now we are running out of 'numbers'.
Has anybody similar problems and can you please share with me possible solutions?
Thank you very much and looking forward to your replies,
Doris

Dear Doris,
Several other possibilities exist for the grouping (not only PSG),
for example :
A) the "Employee subgroup grouping for time quotas" (ESG)
which is a char1 field (so you can use many more then the ones you
use at the moment)
B) field "Quota type selection group" (Quomo), from the documentation
of this field in V_T559L:
"Quota type selection rule group
You can use the quota type selection rule group to control absence
quota type selection based on the employee's organizational assignment.
Using different quota type selection rule groups, you can set specific
rules for quota generation.
Use
Quota generation is carried out in the schema using function QUOTA.
There are three ways of setting the quota type selection rule group:
1. Using function MOD in the time evaluation schema
Function MOD calls a personnel calculation rule that has been modified
to suit the respective schema (for example, XMOD, MODT, or TMOD). The
employee subgroup grouping for personnel calculation rules is queried
in the rule using operation PAYTP. Using operation MODIF Q=xx,
you can determine (for ach grouping) which quota type selection rule
group shoulde be used in time evaluation to access the entries
for the relevant employees in the Leave Accrual table.
2. Using a personnel calculation rule you have written yourself in the
time evaluation schema
In this case, you also set the quota type selection rule group using
operation MODIF Q=xx.
3. Using feature QUOMO
You can use the feature to set the quota type selection rule group based
on other organizational assignments. It is queried by the system during
time evaluation."
As your main issue seems to be the use of several different quota
requirements, you can define, via the use of field QUOMO in V_T559L,
for quota type 10 (just as an example) several different generation
rules (one for each Quomo).
Please note that quota 10 does not need to be always generated in the
same way, it can have a different generation rule for each key
combination of V_T559L.
The most flexible way to select which quomo should be used is via the
feature QUOMO. There you will have the following decision fields
BUKRS Company Code
WERKS Personnel Area
BTRTL Personnel Subarea
PERSG Employee Group
PERSK Employee Subgroup
MOLGA Country Grouping
MOURA Personnel Subarea Grouping for Leave Types
TRFAR Pay scale type
TRFGB Pay Scale Area
TRFGR Pay Scale Group
TRFST Pay Scale Level
SCHKZ Work Schedule Rule
PERNR Personnel Number
ANSVH Work Contract
CTTYP Contract type
Hope this helps,
Regards,
Shree

Analysis Authorization based on Hier node with multiple display hierarchies

Hi guys - I've got a problem where s.o. might have an idea of how to switch on the light at the end of the tunnel, I am currently standing in:
Requirement:
Cost Center Authorization should be given through RSECADMIN, reporting should be possible for any hierarchy that exists for the authorization relevant info object.
Preferred solution:
The Cost Center Analysis Authorization should be given through RSECADMIN - Hierarchy node assignment.
u2022     A dedicated Authorization Cost Center Hierarchy will be maintained in ECC6 as an alternative cost center hierarchy and extracted into BW.
u2022     The RSECADMIN Hierarchy node assignment should be based on a particular node (Type 2).
u2022     The display level will be specified as required (here: Level 7)
u2022     The Authorization granted should be independent of hierarchy name and version (validity 3).
Reporting Scenario and technical impact:
As mentioned above, when designing and running a query the user should be able to freely select other (i.e. than the authorization) display hierarchies for the authorization relevant reporting object 'Cost Center' as well. The technical names of the semantically relevant hierarchy nodes could therefore vary. E.g. cost centers 1, 2 and 3, being assigned under hierarchy node u2018Au2019 of the RSECADMIN relevant authorization hierarchy, could be subsumed by hierarchy node u2018Bu2019 in another display hierarchy, which the user may want to display in accordance to his reporting needs. Ideally, the alternative display hierarchy should therefore display node u2018Bu2019.
My findings so far (based on prototyping) turn out that this is not possible as long u2018Bu2019 (and its hierarchy) is not authorized in RSECADMIN. Can these findings be confirmed? And if not, would anyone have an idea of how to facilitate the reporting scenario?
Would there be any other way to grant access, possibly based on RSECADMIN single values, and also enable the user to flexibly display hierarchies with only those hierarchy nodes whose single cost center values the user has been given access to?
Thanks everyone for your input...
Claus
Edited by: Claus64 on Jul 13, 2009 4:10 AM

HI CLause,
On Jul 14 2009, you wrote in SDN and said:
FYI: Found a solution...
The hierarchy analysis authorization will be based on a navigational attribute of cost center.
With analysis authorizations it is possible to declare the Auth object (e.g. 0COSTCENTER__RACCAUT0) as authorization relevant and leave the superior object 0COSTCENTER auth irrelevant.
The auth will be given for 0COSTCENTER__RACCAUT0. This object will be placed as a filter of the query, being restricted by an Authorization variable for hierarchy nodes.
Due to the concept of Analysis Authorizations, this variable will automatically pick up the nodes granted as part of RSECADMIN Hierarchy based Authorization.
As mentioned above, 0COSTCENTER as the regular reporting characteristic remains auth irrelevant and can therefore take any hierarchy thatu2019s available. Reporting on single values will be possible, too. Only those nodes show up that hold the authorized cost centers in accordance to the authorization.
If the auth relevant 0COSTCENTER__RACCAUT0 is not used in the query definition by either not taking it in as a filter or skipping the Auth variable, the query will launch the message that the authorization is missing. No data show up at all.
Claus
See this thread:
Analysis Authorization based on Hier node with multiple display hierarchies
I am also in the same situation as you and need to understadn your solution. I understand that you created a Nav Attr on 0COSTCENTER and made this auth relevant whilst ensuring that 0COSTCENTER is NOT auth relevant. This is all fine. The issue was you have multiple hierachies for 0COSTCENTER, how did the new Nav Attr help you solve your issue. When loading 0COSTCENTER what values did you load ino the new Nav Attribute and how did that link to the hierachies? Also, in RSECADMIN you created hiearchy nodes based on the Nav Attribute but I am confused as to what values you have in the Nav Attr.
I appreciate if you can share your solution from the past in more details.
many thanks

How to restrict authorization based on profit center in ke80 report

hi friends
we have a situation where we need to maintain the authorization based on profit center in ke80 report. The authorzation object K_PCA is not working. whenever we assign a particular profit center and then generate the profile, we still get the message no autjorization and when we check su53 it shows it needs '' asterisk. but we cant assign the asterisk as we have 5 subsidaries and there are using 5 different set of profit centers so assigning asterisk () would be comprimising on our security.
does anybody came across this situation and if yes how did they resolve this?
I need your suggestions on how to maintain this restriction.
Regards,
Imran

Hi Friends
The problem has beend solved. It turns out that this is a report writer issue. We raised the issue with SAP and they informed that 'For Report Painter/Writer every item is checked if you have the authori-zation or not. Only the items with authorization fullfilled will be displayed afterwards'.
Based on SAP answer we created different reports for each profit center/company code.
I would like to thank you all for your time and inputs.
Regards,

Create personnel subareas

Hi experts,
I just enrolled the course SAP HR module and hope you won't think my questions too stupid.
I tried to create my personnel subareas from SPRO's enterprise structure. This was what I wanted to do:
Personnel area: 0000
Personnel subarea: 01, 02, 03, 04, 05, 06 (all under personnel area 0000)
However, I kept getting an error message: "01 doesn't not exist in (check entry)" when I tried to create personnel subarea 01.
Do you know what was the problem and how should I fix it? Thanks in advance.
Catherine Sum
P.S. Sorry I just finished my third SAP HR class, please give me step by step instructions if possible.

Hi Catherine
Are these defined in V_T001P
Before you can use the HR system the way you want to you have to ensure the IMG (SAP Implementation
Guide - transaction SPRO) is completed
It is possible one of the IMG steps will require you to check or update V_T001P
Best regards
Stuart

Personnel subarea inheritance issue

Hi,
not sure if this is an abap or functional question, so I started here.
I have a report using Logical Database PNPCE to find some values from a couple of info types. When I select a unit (from the 'OrgStructure' button at the top of the screen), say 111, and all its sub-units with no selections in the selection screen, I get one person displayed. This is correct and this person is in a sub-unit 3 levels down (unit 333).
I then added a selection to only display people in units with Personnel SubArea 'OTEC'. Now I get no results output. When I look in PPOME, I can see that unit 333 has Personnel SubArea 'OTEC' but it is inherited from '111'.
In PP01, unit 111 has an Account Assignment entry (Info Type 1008) but 333 does not.
Does anyone know how to report on this?
Is there a flag somewhere that tells the LDB to check for inherited units?
If not, any ideas if there is a function out there to find the superior unit for these sub-units?
Thanks.

Hi,
I couldn't find a simple solution so have used the FM RH_CHECK_ACC_INPUT to get the parent org unit details.
Thanks.

HR: Mass Update Personnel subareas

Hey All,
I wanted to know if there is a way to mass update the personnel subareas for all the personnel areas in HR. I know that we can maintain the personnel sub areas in SPRO but doing this manually is going to be very time consuming since we have lots of data to update. Is there any other way, any BAPI I can use, Any transaction i can create an LSMW of.
Any input is highly appreciated..
Thanks.

Thank you for your input. I have used HR_MAINTAIN_MASTERDATA to update infotypes to a peratining user but how do i use it to update personnel areas in general??
I am talking about updating subareas to personnel areas in general, not related to a particular emloyee.

How to check the authorization based on webdynpro application

Hi Experts,
I was asked to develop a webdynpro component with two webdynpro applications, one each for internal party and external party to be used.
So how to restrict or check the authorization based on webdynpro application used?
Do we have any authorization object like S_TCODE for webdynpro application in roles and authorizations?
Please enlighten me.
Regards,
Ajay Matam

You can assign an authorization object to the Web Dynpro Application within SICF -
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/61/d93822a88e15489a9391f309767366/frameset.htm
Of course you could also programatically check which web dynpro application is being used from within the component and then call a custom auth-check. However maintain at the SICF is probably better for visibilty and long term maintenance costs.

Incorrect combinations for personnel area and personnel subare

Hi all,
we are getting incorrect combinations for personnel area and personnel subarea in the Target and as well in report.
we are using standard datasources 0PERS_AREA_TEXT and 0PERS_SAREA_TEXT, we are extracting only masterdata text from ECC, Not maintaining Attibute and Hierarchy for personnel area and personnel subarea.
we created (Actions overview) report on top of standard DSO 0PA_DS12 extracted from data source 0HR_PA_1,
Actually some of employees are changed on xxxx.xx.xx date from one personnel area to another personnel area with respective subarea's, but here employee personnel area are coming correctly but not for subarea.
what i need to do now?
can any one help out in this..
Thanks in advance.
Thanks,
Sri

Hi,
In this context we will have two senarios.
1. Displaying the Personal Area and Personal Sub Area from Transactional data.
2. Displaying from Master Data.
If you choose Scenario 1 then, Personal Area and Personal Sub Area will be shown as per ECC entry. But in second scenario, If one Personal area or Personal Sub Area changed over a period of time that will effect the historical data also.
For Example if your Personal Sub Area changed on Apr 1, 2011.
Scenario 1: Report will be as per ECC Data ( from Apr 1, 2011 onwards it will show new Personal Sub Area).
Scenario 2: Report will show new Personal Sub Area of Personal Area for entire data.
Hope this will help you.
Regards,
Chenna.

Credit management Authorization Based on Value.

Hi All,
Can help me out to find whether we can implement Credit management based on different level of Values or not.As i know we can do authorization based on % like 100%, 110% etc.
But i want to activate release authorization based on the Amount like
level 1 Rs 1 lakh( Can release upto 1 lakh) when it reaches to above of 1 lakh
level2 Rs 2 lakh ( it will release upto 2 lakh)
like wise.As what i understand whatever the standard roles are given relevant to % basis only.

hello, friend.
yes, you can do this in a few ways...
1. try 'Document Class' - a document class is assigned a certain value, which is assigned to a user (the link to credit management is indirect)
2. the traditional way is to use 'Risk Category', and you can set specific values (e.g. maximum document values) when doing OVA8.
i seem to recall there may also be a way to assign values to risk category, but i will check on this.
regards.

Authorization based on personnel subarea

Similar Messages

Maybe you are looking for