Authorization - Help. organization unit

Good Afteroon,
Hello
Im working for company, we have some kind of problem, let me see if I Can explain it well:
I have many company, for example:
AAAA
BBBB
CCCC
DDDD
u2026
ZZZZ
Imagine I haver user :
JOHN
MICHAEL
PAUL
ALEX
JACK
Etcu2026.
Profiles
1) SAP_PROFILE_1: company: AAAA, BBBB user: JOHN, MICHAELu2026 (its mean john and Michael have access to company AAAA and BBBB)
2) SAP_PROFILE_2: company: BBBB, DDDD user: JOHN, PAUL, ALEX (u201C u201C)
Imagine I want to give access the company CCCC to only JOHN and PAUL, I know that I can do a profile SAP_PROFILE_3 and put company: CCCC awith John and Paul..
But I donu2019t want to create whole time new profiles for do itu2026 I want to have a simple solution of giving access the companys in profiles to user, because where I work most of time they are giving , changing, e removing access the companys to useru2026 and some have access to one or more company, I cant remove one company and create other profile with whole except where he donu2019t have access..
Anyone can help me for structure it better? Which is the best way for I can change or give access to them without creating new profiles?
Because this company has many many useru2026 we have a lot of problem..
Thank you very much
Regards
Edited by: Pheno SAP on Jun 24, 2008 1:47 PM

Hi ,
You can use standard authorization objects for the same check tcode su21 and try to find a suitable one for you some of them for example can be
A_IMPR_BUK Company Codes for Investment Program Positions
A_S_WERK Asset Master Data Maintenance: Company Code/Plant
Once you add these to the profiles you just have to add the company code to this object to give authorization for that company code
Regards,
Himanshu Verma

Similar Messages

LSO course authorization for Organizational Unit

Hi,
Is is possible to restrict courses in a course catalog according to Organizational unit. In the system we can restrict users to specific courses through structural authorization, but is it possible to maintain authorizations on Organizational units for LSO Courses or course types.
Regards,
Asad

Disappering is the right behavior. On delivery method WBT participant type 'O' cannot be booked because WBT can be only accessed using Learning portal and Learning portal cannot be logged in using Org. Unit. So this is not possible for this release.
But i have heard in EHP4 this option of Org. unit booking on WBT is possible but not directly but system will take care if you select an org unit for booking.
Regards, kavya
Edited by: Kavya Shree on Oct 30, 2008 10:08 AM

Authorization connected with organizational unit

Dear friends,
I've to define authorization to an e-mail transaction based on organizational unit (PPOMA_CRM).
I don't know if it is possible,
please, help me!
Thanks

For e-mail I guess you are using transaction type Activity. So youcan use authorization objects CRM_ORD_PR and CRM_ORD_LP.
You have more info with examples on how this is used here: http://help.sap.com/saphelp_crm60/helpdata/en/26/99973915e69238e10000000a11402f/content.htm
Regards.

Authorization required for creating new Organizational units

Hi all,
How can we give authorization required for creating new Organizational units (IMG CRM Master Data Organizational Management Organizational Model Create Organizational Model) to a particular user?
Thanks and Regards,
Archana

the basis guy should be able to help.
at a higher level: you need to set authorizations to the roles assigned, the transaction code is pfcg.
you may create a new role with the required authorization and assign to the relevant users.
hope it helps..
regards
RH

Authorization required for creating new Organizational units in CRM

Hi all,
How can we give authorization required for creating new Organizational units (IMG CRM Master Data Organizational Management Organizational Model Create Organizational Model) to a particular user?
Thanks and Regards,
Archana

Hi archana,
U can Create a role through Transaction PFCG.
Just create a role and assign the tcode PPOCA_CRM if u want to give the user just only this authorization otherwise u can select the menu list from sap menu and assign this role to that user.
Another way is if that user already exist in that system then just assign that particular transaction codr with that user.
Hope it will help u
Regards
Subhash

PM Organization Units Authorization on User Level

Hello experts,
Is there a way to add authorization for an organization unit (i.e. Planning Plant) on a user (SU01) level and not on a authorization objects (PFCG) level?
For example,
I would like to create the following Role (profile):
ZPM_AUT_EQM_EQUIPMENT_DISPLAY
This role should be able to display equipment from the Plant Maintenance module.
However our problem is, we would like to create authorization levels with organizational units for each user:
For example:
User jsmith has ZPM_AUT_EQM_EQUIPMENT_DISPLAY assigned but can only display equipment from Planning Plant SL01.
We know we can create this authorization creating several roles, like:
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_SL01
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_SJ01
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_AG01
but our idea is not create several roles, but to assign the Planning Plant authorization on a user level and leave just one role so we would only need ZPM_AUT_EQM_EQUIPMENT_DISPLAY.
Is there a way to do this?
Thank you in advanced for your replies.
Best regards,
Fernando Montenegro

Hi ,
Could you share about your solution ? I think I have face the same problem as yours.

Organization Units Authorization on user level

Hello experts,
Is there a way to add authorization for an organization unit (i.e. Company Code) on a user (SU01) level and not on a authorization objects (PFCG) level?
For example,
I would like to create the following Role (profile):
ZFI_AP_REPORT_DISPLAY
This role should be able to display AP report from the Financial module.
However our problem is, we would like to create authorization levels with organizational units for each user:
For example:
User Anson has ZFI_AP_REPORT_DISPLAY assigned but can only display Report from Company Code 3202.
We know we can create this authorization creating several roles, like:
ZFI_AP_REPORT_DISPLAY_3201
ZFI_AP_REPORT_DISPLAY _3202
ZFI_AP_REPORT_DISPLAY_3203
but our idea is not create several roles, but to assign the Company Code authorization on a user level and leave just one role so we would only need ZFI_AP_REPORT_DISPLAY.
Is there a way to do this?
Thank you in advanced for your replies.
Christine Tseng

I agree with Jurjen. There is no point creating a "new" authorisation concept for a few transactions. If you use standard authorisation objects for the check in your custom tcodes then you will likely have very little work to do if you assign those tcodes to existing roles.
Even using a custom auth object & creating the variants will take up no more time than doing something like repeating the variable functionality in BI or messing about with PIDs in the UMR (which I definitely do not recommend). By sticking with the standard concept you ensure consistency, making it much easier to support and/or handover if you move on from the role.

Search Help for Organization Unit ID..

Hello Friends,
Is there any search help which will display all the Organization Unit ID?..
John.

Hello Friends,
When you goto Users_gen->create->copy user and employee... - > create users from existing SU01 users.. you can see the Organization unit id input field.. which has F4 help.. I need to have same F4 help in my custom program.. when i try to find the search help in debug mode i found that 'HRBAS00OBJID' but when i execute this search help in se11.. i dont find the same value which appear in the Users_gen. when i execute in se11 i can see more than 5000 records... appear but when execute users_gen i can see only 20 records.. i want to know is there any other search help will only display the Organiztion unit id only..
John.

View of organizational unit in Service request

Hi everyone,
In our service request, we are trying to visualise all the organizational unit (of the organization model) of a BP.
We achieve to see the direct service group where the BP is assigned but we are trying to see more of the link to the organizational model.
For example : our organizational model looks like this:
For user AJAUSSAUD1, I can see the direct link to PSE Equiment in my service request (this is determined in the partner schema determination)
However, we would like to be able to see MC1 (here 3 level above) in the service request.
We are using service organization as function and all the organizational unit are determined as service organization as we are using it to authorizations access.
Does anyone know if there is a way to see the link with all the organizational unit of a user in a service request?
Would it be with the attribute available in the ppoma-crm, but how to add the field and make them available in the service request view?
Thank you,
Regards,
Anaïs

Hello Anais,
As far as I know, there is no standard way to view an organizational hierarchy in a service request. You will need to do some developments. There are two options -
1. If you want the 3 org levels to be stored in data base table for future reference and reporting
You can add 3 fields in ORGMAN sub object using AET. This will add the fields to table CRMD_ORGMAN. After org determination has happened in your service request, you can use BAdi - CRM_ORGMAN_BADI, methd - CRM_ORGMAN_MERGE to fill values of these 3 org levels. You have to recursively use functions or query table HRP1001 to get the parent of determined service org and then its parent and so on.
Remember once these 3 fields are added at database level, they are available for all transaction types of one order. These fields can be made available to BW queues also at time of adding them.
2. If you do not want the 3 org levels to be stored in data base table
This would mean you only want these fields for display to end user.
Add 3 model nodes in the web ui component. In the getter method of 1st field, add select query or call function to get parent of determined service org. Similarly for other 2 fields.
Hope this will help. Maybe you also get some different suggestion from other guys.
Regards,
Niraj

Organizational unit transfers ,how to deal with the person in it ?

Hi,All,I need your help!
if an organizational unit has been transfered to another upper organizational unit ,and there are already persons assigned to different positions of it,so how to deal with this problem?are those person's IT 0000,0001should be changed too?and how to maintain this kind of change?is a personnel action necessary?or there is some other more efficient way for it?

Hi
In IT0001 You have a Position which is linked to a Org unit. If you want to change the org units reporting relationship then you have to change it in OM by creating a new relationship with the upper org unit.
All the person are assigned to position so nothing needs to be done in PA.
Reward points if useful.
Regards

Function module for automating creation of organizational unit

Experts,
I am using SRM 4.0. In my system R/3 is acting as backend.
For creation of new organisational unit in SRM, which is not present in SRM but present in R/3 side i have to do the manual activity every time.
Is there any function module? Which can automate this process. If there is any function module which i can use please let me know. and how can i use that also please let me know.
By this automation every time through the program the new organization unit should created in SRM side.
Please let me know..
Thanks in advance. I will appriciate through rewards points.

Hi,
Thanks for your input. But i am planning to send one file for HR records and then from that file through program i will upload the file. IF for some user the orgaisation unit will not be found then there itself it would create the OU through Function module(If Any)... I am doing like this as the HR system is some legacy system not the R/3 system.
So Please help me to find out function module.
i will appeciate for you help.
Thanks

Business partner of organizational unit is not consistent

Hi,
Client is on SRM 4.0. When we are trying to search a user in the org structure, and when clicking on "Check" for this user, it was showing fine. But when we are searching any BP in the org strucutre, then immediately the BP name is vanishing against the BP of the user and when doing the "Check" it is showing the below two messages:
Business Partner of organizational unit XXXXXXX is not consistent
User cannot be repaired becasue the organizational unit contains errors
When checking in BBP_CHECK_USRES, the user is not showing as defective. It is green.
Similarly, the the organizational unit check is also showing as green.
System is advising to run BBP_BP_OM_INTEGRATE. When we run this for the org units, these are coming as green.
Users are able to create the shopping carts and also are able to create confirmations. But the problem is happening for some of the users where the system is not allowing to create shopping basket / confirmation.
Strange thing is that, when we are searching the user by user id in the org structure, then the check is showing no messages. But if we search the same user using the BP number, then in the check, the messages are coming. And once the messages appear, it is appearing for all the users in the org strucutre even at the root node level.
Any help is highly appreciated.
Thanks & Regards,
Aswini

Hi Aswini,
There are some possibilities to raise these kind of errors messages:
1) User with inconsistent data.
Please, check the instructions described in the following notes:
597475 - Repair users with inconsistent address data
-> use the report B_REPAIR_EBP_USER_2 to make the user consistent.
419423 - Repairing incorrect EBP users
350129 - Creating business partner for organizational unit
When you create the Org Units have you fully completed the address
data, e.g post coe, telephone/fax number etc..
If not, please enter a full address, save the data and see if this
generates the Business Partner.
Remember, that you can delete this user and create a new user.
2) Error in the positions after HR replication
Please, implement the following notes and retest the scenario:
1056873 - Incorrect SRM users after HR distribution
1016450 - Replication of persons deletes positions in SRM
After implementing these notes you should send the employee
corresponsing to the user in error with his position (using
transaction PFAL or report RHALEINI in UPDATE mode for all periods.
3) the user was deleted and a new was created and during these two
actions the user opened documents. So, in this case, the new user
becomes inconsistent
If the user is deleted from SU01 still the BP and S which is related to
that user will be retained (we can see this in PPOMA_BBP) transaction.
In this case we can create the user again using SU01 and can be attached
with the old 'S' and 'BP'.
2. If the user is completed deleted ie., all relations BP and S.
The new user has created.
In this case if the new user is corrupted we can delete this
user (since the new user doesn't create any documents so far). But the
old documents should refer to the new BP related to the new user.
========================
Also, another option would be to follow the below instructions
After applying the notes 1056873 & 1016450, send the employees
corresponding to the users in errors with their positions (using
transaction PFAL or report RHALEINI in UPDATE mode for all periods,
using evaluation path A008) ? If not, please do this and it must repair
the SRM users. Please test and give me the feedback.
Hope this helps,
Kind Regards,
Matthew

Business Partner Number in Organizational Unit

Hi All,
I am Configuring Organizationla model in CRM 4.0, as we know the system automatically generates a BP of role type of Organizational Unit as soon as we save the Organizational Unit which we created.
But in my case Partner ID is generating but not Business Partner can you please advice me in this regard?
I have checked all the number ranges and all.everything is ok but i dont understand what is missing and where? This is Urgent plz.
It would be great help if you can spare some time in this regard.
Hopefully waiting for your reply at the earliest.
Thanks and warm regards,
Vali.

It should create a BP of type Org as soon as you add a organization in the Org model.
Go to Tx ppoma_crm (Maintain Org Model).
Create a Org and add other data like address and save it .
Exit the screen and open the org model again you would see the BP Number under the Business Partner column for the selected Org.You couls also see Code,ID,Valid from,Valid to columns for the organization.
Take the BP Number and open it through BP transaction.
Thanks,
Thirumala.

How to get the list of organization unit assigned to user

hello All,
i have to get the list of organization unit which is assigned to user. i mean if user ABC is assigned to 10 Org unit then how would i get those 10 sales Org? is there Any function module?
Regards.

hello Bruno,
Thanks for reply...i got the Org unit with position...now i need to get territory Id / Areas related to those position's. can u help me in this regard?
Regards

I need a list of all the organizational units, sub organizational units,

I need a list of all the organizational units, sub organizational
units,and their security groups which are present in all sub OUs

Hi,
There are lots of way to export OU, Sub OU and Security Group.
1> Open AD console > run query > export with CSV file.
2> Run “CSVD” command as per your requirement.
3>Download Manage Engine Software > Install to any computer of Domain member > Set credential for domain controller access > Export the customized information, as per your requirement with XLS, PDF,
CSV or Ect.
3rd option is very easy to export customized reports
Deepak Kotian.
MCP, MCTS, MCITP Exchange 2010 Ent. Administrator
Disclaimer:
Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognizes useful contributions. Thanks!
All the opinions expressed here is mine. This posting is provided "AS IS"
with no warranties or guarantees and confers no right

Authorization - Help. organization unit

Similar Messages

Maybe you are looking for