Authorization group in OB52

Hi,
We want to give April 2009 authorization for one user and rest of the users should be post in this monthly.
for that we have created 1 authorization groups in OB52 we entered like this:
0001 + 1 2009 1 2009 3 2009 3 2009 3333 (Aut. group)
we assigned 3333 in user profile also.
guide me
sateesh

Hi Sateesh,
It should be the other way around. The first section of the periods is controlled by the authorisation group. I understand that the user profile with the authorisation 3333 should be able to post in April ie 04/2009. Others should not be allowed to post, right?
Maintain as follows in OB52 -
0001  +  <GL Accounts>  04  2009  04  2009  06  2009  06  2009  3333
0001  D  <GL Accounts>  04  2009  04  2009  06  2009  06  2009  3333
0001  K  <GL Accounts>  04  2009  04  2009  06  2009  06  2009  3333
0001  M  <GL Accounts>  04  2009  04  2009  06  2009  06  2009  3333
0001  S  <GL Accounts>  04  2009  04  2009  06  2009  06  2009  3333
0001  A  <GL Accounts>  04  2009  04  2009  06  2009  06  2009  3333
Regards,
Mike

Similar Messages

  • Use of Authorization Group in OB52

    Dear Experts,
    I have updated Authorization Group as "OB52" in the last column of OB52 T-Code against each posting period variant with account type + , A,D,K,S,M etc with normal period 1 to 12 and special period 13 to 16.
    The same Authorization Group "OB52" is updated in one of FI users say Mr X Role profile under authorization object F_BKPF_BUP.
    Now as per the SAP standard practice the special period 13-16 should open for the user Mr X and block for all other users. But system is allowing to do transaction with special period 13-16 for other users also.
    Please advise where I am wrong.
    Regards,
    Alok

    Dear,
    I will explain you the step involved for auth Mr.X to post for the particular period.
    Let take an example  that Mr.X has to be allowed to post between the period 1 to 11 and other user only for the period 11(Apr - March as fiscal year).
    Now,for valuation variant with account  ' +'  for the first period, you enter from period as '1' and to period as '10' and in second period, you enter from period '11' and to period '11', provide the auth group (eg KU - key user)  in the last column.
    For other accounts (A,D,M,K,S) change the first period from '1' to '12' and dont assign any auth group.
    Now you goto se16n and check in TBRG table whether your auth group KU is available for the object F_BKPF_BUP,if not maintain it.
    The last step is to assign "KU" to Mr.X profile or role against the object F_BKPF_BUP.
    Once you made the change"generate" and save it.
    Now the system will permit Mr.X to post for the periods between 1 to 11 and other user only for 11 period.
    Hope that i am ab;le to clear your boubt.
    Do revert for any further assistance.
    Take care
    God Bless
    Regards

  • Multiple Authorization groups to be used in OB52 for a single company code

    Hello All,
    I need help in creating and assigning authorization groups in Transaction Code: OB52 to control the postings of few users in one authorization group. That is i want some users  to post in 2 back  period and others in only 1 back period.I have tried from my side and it is still not working.
    I followed the following step:
    I have created 2 groups and assigned the users accordingly but the thing is i am only able to find 1 feild for entering authorization group
    If there is any thing i am missing or if i have done some thing wrong in this process please help me.
    Please Provide me the logic of how to use two authorization groups with one feild.
    Best Regards,
    Ravi
    Edited by: Ravi Eddhula Reddy Kumar on Apr 3, 2011 1:01 PM

    Hi,
    Try with this possibility
    In ob52 create two rows.
    Assign the required periods for Group A in Row 1
    Assign the required periods for Groub b in Row 2
    Regards
    Prasad

  • Authorization Group in T-Code: OB52

    Hi,
    I need to maintain 2 Auth. Group in T-Code: OB52, my requirment is below:
    for some users (nearly 25) needs to post the transaction in June Month and for some users (nearly 10)should have to post for selected GL in the month of June.
    So we decide to create two roles and assign the Auth Group in F_BKPF_BUP Auth. group. But i need to know whether the system will allow to assign two Auth. Group for one Company code (ie., 2 Auth. Group and all common users)
    Please revert ASAP.
    Regards
    JS

    The help on AuGr field in OB52 is good.  Here it is
    Authorization Group
    The authorization group allows extended authorization protection for particular objects. The authorization groups are freely definable. The authorization groups usually occur in authorization objects together with an activity.
    Use
    A posting period can be made available to only a limited set of users using the authorization group.
    Procedure
    If only a limited set of users is to be able to post in a particular posting period, proceed as follows:
    Add the posting period authorization (authorization object F_BKPF_BUP) to the authorizations of the selected users. Assign an authorization group (e.g. '0001').
    Enter the account type '+' for the posting period variant to which the restriction is to apply. Enter the period(s) whose use is to be restricted in the first period, those which are available to all users in the second period, and the authorization group (e.g. '0001') in the last column.
    Examples
    A posting period can be successively restricted. If, e.g. 10 users have the posting period authorization with authorization group '0001', and 3 of these 10 users also with authorization group '0002'.
    If the period is only to be accessible to the 10 selected users the authorization group '0001' is entered in the posting period variant. Access can later be restricted to the remaining 3 users by entering '0002'.
    I guess your requirement can very well be met, as explained in the example above.  Also implement the following SAP Note to be able to assign the authorization group at document header level (account type '+') and at line item level in Transaction OB52.
    https://service.sap.com/sap/support/notes/891505
    Srikanth
    PS: I have seen in a reply above that AuGr controls only special periods, which is not a correct statement.  AuGr controls postings in the period specified in From per.1/Year To period/Year in OB52.

  • Assign posting periods to authorization group in tcode S_ARL_87003642

    Hello,
    I want to restrict posting periods for some users. Therefore, I have created 2 functions associated to 2 authorization groups.
    In transaction S_ARL_87003642, when I try to assign different posting periods to each authorization group to the same company code (Posting Period Variant) it appears a message saying u2018Target key must be different from source keyu2019.
    What am I doing wrong? Do you know how can I restrict posting periods for some users?
    Thanks and regards
    Ana Rita

    Dear,
    You simply have to define authorisation groups in OB52 and assign this group to F_bkpf_bup in SU01 against user proflie as desired. Take basis help.
    Regards

  • Authorization check in OB52

    Hi,
    We have a following client requirement.
    u2022     In OB52, once user logged In then only the respective company code ( to whom he belongs) should be available for editing i.e. opening / closing of periods and Other company codes should be in grayed out status.
    Can we built a check like that?
    Regards
    Anuj

    Hi
    If you have several company codes and want your users only to be able to open and close periods
    (transaction OB52) belonging to their posting period variant (=company code). 
    First you configure the Posting Variant :-
    1) FI- FI Global Settings - Document - Posting Periods - Define Variants for Posting Periods 
    2) FI- FI Global Settings - Document - Posting Periods - Assign Variants to Company Code
    Second Step:-
    Goto SE11 copy the view V_T001B to ZV_T001B_000X (000X indicate the Posting Variant)
    In Change mode, tabstrips Selection Conditions Insert line 2 with
    Table     Field Name   Operator   Comparative Value    AND/OR
    T001B   BUKRS           EQ            '000X'                          AND
    Save your entries
    Third Step :-
    Goto SE54, Options Generated Objects -> Create
    Authorizations Group  FC31
    Function Group          Z00F0
    Maintenance Type     One Type
    Overview Screen       65
    Single Screen             0
    Final Step :-
    Goto SE93, Create a new transaction code ZOB52_000X
    Start object - Transaction with parameters (parameter transaction)
    Transaction SM30, Tick Skip initial screen
    Regards
    Sanil Bhandari

  • Authorization Group for G/L Account

    Hi,
    What?
    - I wish to restrict the 'posting' of a G/L account to be done by certain users only
    How?
    - What I have done was...
    a) From FS00, I have added a free-text (BANK) into the Authorization Group for a G/L account
    b) From PFCG, a new role was created to allow these 2 Authorization Objects, F_BKPF_BES and F_SKA1_BES
    c) 'BANK' was entered for the Authorization Group for both these 2 Authorization Objects
    d) From there, I have assigned this new role to the user that I wish to allow Posting of the G/L account
    Problem?
    - Other users still can do Posting for this G/L account
    - Any steps which I have missed out here or done wrongly?
    Thanks,
    Brandon

    Hi,
    Some other roles of the users may override and cause the users to post against this GL account.
    Check all the roles relevant for the restricted users. 
    Use SUIM t-code to find if the auth object mentioned above is included in any other role.
    If it be, restrict that again.
    Generally if one role as no restriction against this auth and not all, this issue tends to happen.
    Regards,
    Sridevi

  • Restrict Vendor line items display by Vendor authorization group

    Hi Gurus,
    I have a requirement to restrict Vendor line item diplay for Tcode FBL1N, I have updated the Authorization object F_LFA1_BEK, its work fine if all the vendors have authorization, However it also display vendors whose auth. group is "BLANK" or "SAPCE",
    Is there a way that I can slove this issue, is there any SAP notes of other object which needs to be updated ?

    Hi,
    this problem has been discussed on this forum last week. Basically, SAP does not perform authorization check if the authorization group is blank. Hence you need to assign authorization object to all vendors.
    Cheers

  • Authorization group in GL A/C

    Hi,
        I have a role that has the authorization group in the authorization objects  F_BKPF_BES , F_SKA1_BES  updated only with 'AUTH' but the same role is also able to access GL accounts with authorization group 'REST'.
       I want to restrict the role to access GL Accounts only with authorization group 'AUTH'.
    How to do it.Kindly advise.
    Thanks.

    GL account Authorization
    Re: How to create authorization groups for G/L Accounting
    Thanks
    Javed

  • Authorization group in GL A/C using FB01

    HI, We have  activated the authorization Group in GL A/c. Using the authorization object F_BKPF_BES we were able to create restrictions on other tcodes like F-28 . However when using the u201CFB01u201D tcode, the authorization check does not have any effect. I have already check the authorization in SU24 for fb01 and status is set to YES. I have also created a trace(using ST01) for this transaction but ST01 does not show any authorization trace for F_BKPF_BES.

    Hello,
    Authorization object：F_BKPF_BES should be checked when you run FB01.
    In your case,please try to check the following points:
    1.Authrization group was assigend to G/.L master data correctly.
    2.Authrization group  was assigend to object：F_BKPF_BES correctly.
    3.Avtivity was defined in this object correctly.
    4.Role was assgined to user correctly.
    5.SAP_ALL authorization was deleted from the user profile.
    Note: it is impossible to define the authorization group as '  '(space) in object：F_BKPF_BES,
    if '  ' was defined, system will consider there are no any setting existed.
    Hope the above infor. could help you to solve this issue.
    Best Regards,

  • Creation of Authorization group

    Hello All,
    I have a requirement from FI consultant for creation of new authorization group. This auth. group we want to use in FI objects like F_BKPF_BEK. so that for few end users they should not change any vendor data in FK02.
    I have gone through several posts, but not able to get / understand clear steps for creation of auth group and assignment.
    One of the post i found is below:
    [How to create Authorization group;
    i tried to do few steps but not in right direction. Request you some one please suggest me the steps for cration.
    Rgds,
    Durga.

    Julius,
    Thanks for the update. As suggested by you i have inserted one entry of auth group in TBRG table against FI object with SE16.
    Now how do we maintain the view of V_TBRG. Is it from SE11?, if yes then i should do this step from ABAP login.
    But what i heard is, this activity is purely involved by Basis people.
    Please suggest.
    Rgds,
    Durga.

  • Customer Master Data and Line Items Balances Display - Authorization Group

    One autorization group was created and assigned to some customer masters in General, Company Code and Sales Area's.
    User is restricted to one authorization group. When executing FBL5N, all customer balances are displayed i.e. including blank authorization group customer. It is not restricted to authorization group customer! Why?

    Kindly check the authorization objects assigned in the user profile. You may ask your basis to help you with the authorization.

  • Authorization Group (BEGRU) search help  required in Easy DMS

    Hi all,
    I had defined some value in authorization group (BEGRU) in SAP. When i opened the Document using CV01N/ CV02N transaction, then F4 help is available to me.
    but when i opened the same document via SAP Easy DMS 7.0, Search help functionality is not there.
    How could i activate this.
    Pls.. Suggest.
    Regards,
    S Anand

    Hello Sheo,
      EasyDMS does not provide search help for Authorization object as of  the latest release. The search help achieved by customization of the domain BEGRU does not reflect in EasyDMS.
    To achieve this, you can enhance easydms interface by using either easydms plugins or EasyDMS custom tab.
    refer:
    http://wiki.sdn.sap.com/wiki/display/PLM/EasyDMSPlugin%28Addin%29-Advanced+Development
    note: 1355293
    Regards
    Surjit

  • BAPI to create bp with name, search term, address and Authorization Group

    Hi
      which BAPI could be used to create Business Partner (type organazation) with names, search term, address and the Authorization Group field.
      ths

    Hello ,
    You can use : BAPI_BUPA_CREATE_FROM_DATA
    In case you need to update additional fragments just search in trn code SE37  for BAPI_BUPA_*CREATE.
    For example BAPI_BUPA_FRG0040_CREATE - Create classification data for BP , etc'.
    Additional you can use XIF :CRMXIF_PARTNER_SAVE to create business partners
    Rika

  • Authorization Group

    Dear Friends,
    I know I can restrict two user "A" & "B"  who create DIR  " 1001" & "1002" respectively under same document Type say "DRW". Means they cannot display the DIR created by each other  by Authorization Object "C_SIGN_BGR".
    I have tried this and works perfect.
    But my question is can I maintain these Authorization Groups so that  when user enters any wrong Authorization group, it should not allow him to enter in Authorization Group Field.
    If I Maintain the setting in SPRO in DMS>Approvals>Define Authorization groups, will my maintained  values will be validated with the values I enter in Authorization Group field.
    Also I know the developement mentioned under link.
    [https://wiki.sdn.sap.com/wiki/display/PLM/F4forAuthorization+group]
    But I want to avoid this developement.
    Waiting for your reply.
    With warm Regards
    Mangesh

    Hi Mangesh,
    To achieve this I suggest you to Update domain BEGRU as mentioned in the link
    http://wiki.sdn.sap.com/wiki/display/PLM/UsingAuthorizationGroupfieldin+DMS
    values can be maitained in ztable
    You can also have search help for BEGRU, by adding search help in DRAW table for BEGRU.
    also go through post - Re: Authorization Group in CV01n Document Data tab
    Auth object C_DRAW_BGR has field value reference to data element BEGRU
    Regards
    Surjit

Maybe you are looking for