Authorization Control of Customer Master

Hi Experts,
Is it possible to create a role with authorization restrict as follows ?
The role is authorized to change both general level and company code level data of customer group A. For customer group B, however, it is authorized to change company code level data only. I tried to achieve this by assigning object F_KNA1_GEN to the role twice with different activities on different customer groups. But customer group cannot be specified in this object.
So, anyone has any solution?
Any reply will be greatly appreciated. Thanks

Sorry, I repost it under SAP Financials Forum...

Similar Messages

Authorization control for batch master

Hello Experts,
I have a special requirement from client on authorization control on batch master. The requirement is user should not be allowed to change the batch header details but allow to change selected characteristic values. For e.g If I have a batch A, the header values such as prod date, country of orgin etc should not be allowed to change. In classification view few characteristics only should be editable, rest all should only be displayed.
Is there any option to do this. Either through authorization control or exits. We dont want to create a custom transaction to achieve this.
Thanks in advance
Prathib

Hello
The following document explains how to check which authorization objects are called on each transaction:
How to analyze authorization issues in debug
BR
Caetano

Change Message Control for Customer Master data

Hi Friends,
I have to choose/populate a message when the user is about to create an already existing customer.
In SPRO --> Financial Accounting --> Accounts Receivable and Accounts Payable --> Customer Accounts --> Master Data --> Preparations for creating customer master data --> "change message control for customer master data" ...
OK...
When u click this it goes into Change View "message control by User" Overview screen wherein u can insert new messages and texts and the type of message ....
Now .....
I want to display the 145th message (F4 help of the Message column) ..... it picks up the text "Customer found with same address;check"..... with Online mesasage type 'I' and batch type 'I' and with standard type '-' ..
I want to have the same message with message types 'E','E', and 'I' respectively.......
How is this possible (or) what should i do to meet my requirement :-|
Expecting ur answers
Thanks in advance ........
Cheers,
R.Kripa.

Hey yes it is not possible (as of now
I ve met the requirement by just using message statement in the program itself ............
My requirement is met but still if anyone knows about this do answer / reply
Thanks
Cheers,
R.Kripa.

Sales office authorization check in customer master,Sale order and billing

Hello Experts
We need to restrict authorization for customer master, sale order and billing based on sales office.
Can somebody guide me how to activate this ? Has anyone of you have successfully done that?
Regards
kumarlib

Hello Kumar,
User authorization is within Basis expertise, but if you want to get some feel for what authorization objects are take a look at trans SUIM. But basically how it works is for a given transaction the level of check is specified -- in this case Sales Office. Based on values stored in that field the user is allowed or not allowed transaction access.
So you determine whatever the needed matrix is for authorization restriction (i.e. user A can access Sales Office xxx, user B can access Sales Office yyy & so on). Also give Basis the transaction codes to restrict, along w/the technical table/field for each (like from customer master - KNVV-VKBUR, from sales doc level VBAK-VKBUR). Basis sets up the authorization object w/assignments to the users accordingly.
This is standard SAP & your Basis support should be familiar with it. Good luck.

Field Control for Additional TAB in Customer Master

Hi,
Can anyboby please tell me that where is the field control for Additional Buttons example:"Custom Authorization Field" for customer master in ECC 6.
As I can see only the General, Company, Sales field control in the Account Group.
Thanks in advance.
Best regards,
Ipsit

HI
since this is an
additional field, and is not contained in transaction OB20, it is not a
field that can be controlled in conventional ways.
My suggestion would be, to use SE51 (Screen Painter) to maintain the
attributes for this field:
se51
Program         SAPLV02Z
Screen number   0100
Element List    Yes
DISPLAY
SELECT KNA1-KATR1   -   I/O
CLICK on Attributes Button
Here it is possible to set the input as requried.
Regards,
Ramana

VENDOR and Customer master Authorization

Hi Experts
I have requirement about vendor & customer master authorization.client requirement is if a user had created vendor or customer under a purchase organization or sales organization so in this case other Purchase org users shouldn't see any details about this vendor and even they shouldn't be allowed to post to this invoices.even in FBL1N and FBL5N user shouldn't see other region vendor or customer line items.how to handle to this can any one help me on this.
Thanks in advance
Regards
Diwa

Hi,
Just a thought;
Why can't you create a user specific validation for FB60 or other t.codes if wanted, which says that;
If the condition 'Vendor code starts with say 1* series', is met;
then display an error message 'Posting not possible for this Vendor Group XXXX'
This way, you can prevent certain users from posting transactions to a certain vendor groups.
Thanks,
Nirav

Dual Control for Vendor/Customer Master Data

We can set Dual Control for Vendor/Customer Master Data. I have set it. According to the cycle, I have customized sensitive field, and make changes in Vendor/Customer A/c. Here the changes will be confirmed by other user who is authorised to confirm the changes. In this scenario, I would like to know, can we avoid this confirmation once we have actived? If, no than how could we confirm the changes and where can we set authorisation?

Dear,
No, You cannot avoid the dual check if You activate it. Another user by FK08 has to confirm the changes.
Then You can delete the field for the dual control into the table T055F and no check will be done in the future.
I hope this helps.
Mauri

Credit control field not visible in customer master after checking Spro

Hello Gurus,
I have configured Automatic Credit Control In IMG.
I have checked all the necessary spets required for the avtivation of Automatic Credit Control.
But I am facing in problem and will appreciate all your help for this problem.
In Customer master> Sales area data> Billing Document--> delivery and payment terms. Within delivery and payment terms the feild for credit control area is not visible.
I have checked in spro>financial accounting> Ac rec & Ac payable>customer account>master data>preparation for creating customer master> define account groups with screen laypouts (customers).
Within Define account groups with screen laypouts (customers)>account group 001(soldtoparty)details>field status>sales data>billing-->Hedging and credit contr. area I have tried it with optional as well as reuired entry and still the credit control field is not visible in customer master.
Pls provide me the steps as well as solutions for the problem.
Thanks & regards,
Dev.

pls check accunt group again
rgds
nitin

Cretit control area field - Customer master - mass change

Hi Gurus:
I want to use the customer master mass change program (T.code XD99) to assign a default credit control area for all the customers. However when i try to save the mass changes it does not update the credit control area, and shows an information message "0000500004 : No batch input data for screen SAPMF02D 0900" . Did anybody come across such situation ? and how to resolve this ?
Thanks in advance.

Refer to note 552066, The system is attempting to maintain some ETM data that may not be relevant. May be this applies to you.
Symptom
During the start of the mass maintenance with Transaction XD99, the system generates batch input sessions for the import of the data in the background. In the process the system also tries to supply fields RF02D-D0900 and RF02D-D0910 on screen SAPMF02D 101 with data, although these fields do not exist on the screen. Then the batch input processing terminates.
Solution
The correction of the source code for the generation of the batch input data is described in the corresponding correction instruction. A solution that allows also the mass maintenance of ETM data with Transaction XD99 is in preparation.

Customer master message control

hi folks,
need to prevent duplicate MICR information in customer master. is there a way to do this via message control?

Dear Amy,
are You talk about the dual control?
Within IMG: Financial accounting(new)->accounts receivable and accounts
payable->vendor accounts->master data->preparations for creating customer master data->define sensitive fields for dual control (customers)
I hope this helps.
mauri

Customer Master No authorization

Hi,
I need to check the Authorization in customer No. in XD01 transaction code.
The Authorization field of customer No is KUNNR.
In PFCG KUNNR field doesn't appear with the Authorization object.
I added the filed KUNNR with XD01 with SU24( assgine authorization object to transaction ).
Now i am getting the field KUNNR in PFCG. But the authorization check doesn't check the field KUNNAR.
Now in PFCG, I gave the Customer No ( eg : A23410 ) in KUNNR field. It suppose to allow only A23410. But it allow all the all the customer no .. whatever it start Axxxxx.
Form this it show it doesn't check the KUNNR field.
Is there anything beyond this to check , authorization check on KUNNR field. ????

Hi Lee,
Adding objects/fields in SU24 will not enable authorization check in the related ABAP program.
For Customer master following two options are available:
1. User object F_KNA1_BED for restricting authorization for specific master records. Maintain a 4 digit authorization group in the specific master record to be protected. You can enter an authorization group in either the general or in the company code-specific area of the master records. Maintain this authorization group in the object mentioned earlier and assign to the users who should be having access to this particular master record. Pls go through the object documentation before proceeding.
2. User object F_KNA1_AEN for restricting authorization of specific fields at global level. You will have to define field groups to protect fields that you want and assign to users.
The first option is more applicable in your case. The object document will provide a detailed description of how to go about it.
Regards
Sachin

Authorization to particular tabs in the Customer Master

Hi All,
I have a requirement where in for the Transaction VA02 some Users should have access to particular tabs like Unloading Points & Contact Persons, but not for other tabs in the General Data tab in the Customer Master Record.
Can you please suggest how can this be done & whether SD consultants have any role in this.
With best regards,
MP

Hi,
You can try acheiving this in following ways
Goto "OBD2" in account group of the customer select general data, and hide all fields, other than required feilds for the user.
And assign the stutus profile in sales doc. type Ii.e. for order type "OR".
Please try this. If much more control at user level is required for the same scinario please try for an enhancement.
Best regards
DSR

Account Group and partner functions in customer master records

Hi Gurus,
I need your help to confirm the following understand if correct:
1. To create customer master record for partner function Ship-To, need to create a customer master record using the uniquely assigned account group for Ship-To , that is, 0002 . In this ship-to master record, define in its partner function tab, the other partner functions related to it.
2. To create the above, it cannot be achieved by just assigning the partner functions in the partner function tab of SOLD-To customer master record , created using account group 0001.
Question:
1. How does the system know or allow what codes a user can select (f4) or enter manually when defining in customer master record's partner function tab, the partner functions and their respective codes?
How is this controlled? Is it by user authorization? or will user / sales administrator be able to select any codes tied to a partner function?
2. Lets say there are 2 partner functions : Sales employee VE and 9E called Sales Representative. Both of these partner functions are of Partner Type PE.
When defining in customer master record's partner function tab, how does the system know what codes is selectable for the administrator for each of these partner functions?
best regards
M Russo

hi russo,
this is to inform you that,
1. yes you are right.
2. you need to follow the steps as you said.
Question:
1. that you can find in the search basing on account group for partners. that assignment we should know russo which SH to be assigned to which SP. no need to have authorization for that, make a note of the list of SH and SP to be assigned that's all.
yes, he will able to select any SH from the list but make sure that we assign the correct SH to the list of SP.
2. that you will be defining it in Partner Determination Procedures. at the time of CMR creation you have to select the correct code that will get populated in sales order.
hope this clears your issue.
balajia

Authorisation restrictions on Customer Master

Hello all,
Within our organisation there is a request to restrict user access to certain views of the customer master. For example : one group of users are able to create/maintain address and control information, and another group of users are only allowed to maintain the marketing view for example.
I have tried using field groups by assigning fields of certain views to the field groups and then creating a new role and assigning the field group value to object F_KNA1_AEN. I have to say this has not been very successful.
Any ideas?
Any assistance would be greatly appreciated. By the way we are using version 4.6c.
Thank you
Melanie

Hi Melanie,
Scenario-
I have faced similar issue as you. Our requirement was to give authorize marketing department to only extend the customer master but authority to create customer must be with Finance department.
Solution-
I have given Authorisation of XD01 to Marketing department and deactivated General data and company code data form the authorisation object.
Result-
Unless customer number exists marketing department cannot do anything with customer master (cannot extend the customer) and only finance dept has created General and company code data Marketing dept will be allowed to extend the customer master.
I hope it helps.
Note: We are currently using ECC 6.0

Payment Term in customer master to be given restricted access

Hi All,
My client has a requirement...
Payment Term in customer master should be editable only to authorised persons...for all others it should be in display mode...
do we have any user exits to achieve this???
or any valuable inputs/suggestions will be awarded marks...
Prasad

Dear Prasad,
You can acheive this in standard.
Go to IMG>Logistics - General>Business Partner>Customers>Control>Define and Assign Field Authorization Groups
Maintain Customer field groups and maintain the fields(KNVV-ZTERM) in the Group fields.
Go through the help file you will get the detail process to acheive this.
Also if in your company person creating sales area data(Sales Personnel) and person maintaining company code data (FI Personnel) is different and suppose if you want only FI people should be authorized to Maintain and change Payment terms then you can make Payment term field greyed out for T code VD01/VD02 and make it editable in XD01/XD02.
This can be done in TCode OB20 - Transaction dependent screen layout.
Hope any of the solution can be worked around to acheive ur requirement.
Regards
Mayank

Authorization Control of Customer Master

Similar Messages

Maybe you are looking for