Authorization Object assigned to an User

Hi
I am working on a development where I have to identify value of authorization object assigned to an user. This user will be assigned to org plan, to which a business role will be assigned.
Is there any standard FM or table linkage logic that I can use?
I have found FM SUSR_USER_AUTH_FOR_OBJ_GET but it seems that it is relevant from GUI perspective.
Thanks & Regards
HM

Hi,
Please use transaction code SU56, switch to the user in question.
You can see all objects or the required object and assignment of values to the user.
Regards,
Gowrinadh

Similar Messages

Authorization object assignment on USERS

Hi,
i have to maintain authorization objects in transaction types and users in our company, such that the executives (management of all org. units) of the company are able to see all the transactions including activities within the whole company.
on the other hand the employees (<b>not executives</b>, belonging to a specific org unit) should be able to see ONLY the transactions belonging to his org. unit
useful info is avlbl at: http://help.sap.com/saphelp_crm50/helpdata/en/26/99973915e69238e10000000a11402f/frameset.htm
but where and how are these authorization objects assigned?
Kindly help, thnx, all answers appreciated.
Jacob.

hi Jacob,
Look at <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/81/0e0f61b566dc44bbb4055b3ccd25be/frameset.htm">Identity Management</a> maybe it helps you.
Regards.
Manuel

What FM retrieve inner authorization object BBP_ROLE using the user's role

Hi Experts!
Do you know what Function Module can be use to retreive the inner authorization object BBP_ROLE using the user's role
e.g. BUYER : YT:PU:XXXX:BUYERROLE
Object       : BBP_ROLE      SRM: User function / Role
field name : BBP_ROLE      SRM: User function / Role
Activities
Sel      Activity      Text
x       EMP             Employee
x       OPP             Operational Purchaser
......etc
Thanks!

Hi
Execute Txn S_BCE_68001414 in debug mode, and figure out how system takes the inner authorizations through the flow of this program
Regards
Virender Singh

Authorization object assigning to user profile

Hi all,
Wht are the steps involved in assigning authorization object S_GUI with activity 60 (S_GUI ACTVT=60) to the users profile.
Thanks

you can assign authorization profile to user through Role..
goto PFCG, either create a new role or change an existing role(which the user has)
go to authorization tab, change authorization, click manually button,
add S_GUI and then click on values, select 60.. save the role, generate it..
if it is new role that you have created, then go to SU01 - roles, add it.. save user..

Mandatory Authorization object for the BO user

Dear All
I am facing some problem for the BO user.
can you let me know what are mandatory Authorization object for BO user to run the dashboard without error.
Fast reply appreciate.
Thanks
Haji

Dear All
i am working for Analysis Authorization.
i included Analysis Authorisation object to the user.
S_RS_AUTH BI Analysis Authorizations in Role.
when i checked in the BW side its working fine.
when i checked the user in the BO side.
filter values are coming correct, but the values in the column are not showing.
its throwing an error.
kindly help me to solve this issue.
Thanks
Haji

Authorization Objects assigned to a TCode

Hi,
Can you please tell me how do I know which all AUTHORIZATION OBJECTS are assigned to a T-Code.
Thanks in advance,
Ishaq.

hi,
check the T-codes SU24 and SU25
sudheer.A

Authorization objects to avoid users to access workbook design mode

Hi all,
Does anyone knows an authorization object that stops the user to enter workbooks design mode?
We use workbook protection but this disables most of the workbook properties.
Many thanks,
Mazzz

Hi..
see this thread.. hope it helps..
How to prevent workbook users from saving workbooks
You must set up security to control who can save workbooks, where they can be saved, and which workbooks appear in the BEx Browser for a specific user.
Workbooks can also be created in the BEx Analyzer. After executing a query, choose Save u2192 Save as new workbook.
Securing Workbooks
In order to save a workbook, a user needs two authorization objects. The two objects listed below are the minimum authorizations a user needs to save workbooks.
S_GUI: Authorization for GUI activities
S_BDS_DS: Authorizations for document set
Using both S_GUI and S_BDS_DS will enable a user to save workbooks to their Favorites folder.
The authorization object S_GUI has one field, Activity. The activity field must be set to 60. For S_BDS_DS, the user needs activities 03 and 30. The Class Type field should be set to OT.
Saving Workbooks to Roles
If a user wants to save aworkbook to a location where it can be easily accessed by others, they need to save to a Role rather than saving the workbook in their own Favorites folder. Saving to a Role means saving to a security role.
You may want to set up roles specifically for saving workbooks. You can then assign the role to all parties who need to share workbooks.
Another option is to not allow users to save workbooks, but rather only allow power users to save workbooks. This is done to maintain the roles and to ensure that the workbooks are manageable. This also prevents users from changing workbooks saved by other users.
In order to save workbooks to roles, a user needs:
S_USER_AGR: Authorizations: Role check
S_USER_TCD: Transactions in roles
The authorization object S_USER_AGR has two fields:
Activity and Role Name.
Activity field -Must have at least values 01, 02 and If the user can delete workbooks, they will also need value 06.
Role Name, you should enter the specific roles you have created for saving
workbooks. Use proper naming convention for roles so that the roles can be restricted pretty easily. The role name is the name of a role that will be used to hold workbooks. Saving a workbook to a role actually updates the Menu portion of a role, so object S_USER_AGR is a required object.
Authorization object S_USER_TCD has one field
Transaction Code. The user needs value RRMX in this field.
Once a workbooks is saved, the data and the layout is saved in the workbook. For security reasons, we recommend that users save workbooks without the data. To save the workbook without the data, the users selects from following menu path from the BEx Analyzer: Tools > All queries in Workbooks > Delete results
Sathya
Edited by: sathya prasad anumolu on Jul 30, 2008 4:58 PM

Assign authorization objects

HI ,
1. When i create new set of WS do i need to create to them authorization object ?
2. if i create new set of users from scratch in the system and i want to provide to them one role that
I create and contain for instance all the report and transaction that i want to provide,
do i need to add to them another authorization objects ?
3. if i create authorization object in the system how i add it to certain role ,i don't see these
option in PFCG.
Best Regards
Michael

HII,
Yes u can aad other authorization object to the existing role if the role needs it because user is unable to perform any task releated to it because of missing authorization object after seeing it in su53 because sometimes tcode assigned but corresponding authorization is not added by system automatically this creates prob for the user to perform task as far as adding up an authorization object u can added it throught su24 or pfcg in pfcg u need to click on manuaally option u can added upto 8 authroziation objects and if u want to added it through su24 u click on add authorization object feild
but never forget to save and generate the profile after adding authorization object and also do user comparsion and complete comparsion so this object gets added to the role
byeeeeeeeeeeee
takecare

FM that retrieve the inner authorization object BBP_ROLE using user's role

Hi Experts!
Do you know what Function Module can be use to retreive the inner authorization object BBP_ROLE using the user's role
e.g. BUYER : YT:PU:XXXX:BUYERROLE
Object       : BBP_ROLE      SRM: User function / Role
field name : BBP_ROLE      SRM: User function / Role
Activities
Sel      Activity      Text
x       EMP             Employee
x       OPP             Operational Purchaser
......etc
Thanks!

Hi
Execute Txn S_BCE_68001414 in debug mode, and figure out how system takes the inner authorizations through the flow of this program
Regards
Virender Singh

Issue with context specific authorization object P_ORGINCON.

Hello Experts,
The context specific authorization object doesn't evaluate the
structural profile it is assigned to when more than one structural
authorization is assigned to a user.
Please read the below scenario for issue description as follows:
User ZHR_ACT13 is assigned two roles namely ZHR_HRD and ZHR_DEPT_HEAD.
He is the manager for employee ID 167 and is not the manager of employee ID 17.
Role ZHR_HRD has no read/write authorization for Infotype 6. ZHR_HRD is also assigned to structural authorization ALL which is meant for viewing all the objects with no restriction of any relationship.
Role ZHR_DEPT_HEAD has read authorization for infotypes 6 for only the subordinates i.e. the structural authorization ZDEPT_HEAD of viewing only the subordinates data is assigned to this role. Also this structural authorization ZDEPT_HEAD is assigned to infotype 6 using
authorization object P_ORGINCON.
But now the manager ZHR_ACT13 is able to read infotype 6 data for employee ID 17 who is not his subordinate even though only structural authorization ZDEPT_HEAD is assigned to infotype 6 using P_ORGINCON. We
expect that user ZHR_ACT13 must be able to read infotype 6 data only for employee ID 167 and not for employee ID 17.
Please kindly help resolve this issue.
Thanks & Regards,
Roshan.

This has been resolved.

Authorization Object for Workbook

Hi...
I have a ENDUSER role. The users assigned to this role, can only display and execute queries. (S_RS_COMP & S_RS_COMP1 are given activities 'Display(03), Execute(16) and Enter, Include & Assign (22)'.
But, the users now, cannot build Workbooks out of queries. Is there a way, where I can allow the user assigned to ENDUSER role, to build Workbooks.
I found an authorization object S_RS_WKBK, which is relevant to this, but its says obselete (do not use). So, am unable to use it.
Can anyone say me the Authorization Object used for allowing Users to create and save their workbooks?
Thanks,
Sai.

Hi Sai,
For saving workbooks in Favorites you need:
S_GUI
S_BDS_DS
For saving workbooks in Roles you need:
S_USER_AGR
S_USER_TCD
Best regards,
Eugene

Authorization object P_ASRCONT

Hi Experts,
I want to assign authorization object P_ASRCONT to one user. Also I need to check the particular user has this authorization object P_ASRCONT or not.
Can anybody help me on this?
Thanks,
Helps will be appreciated.

Hi,
Procedure for checking authorization object assigned to user:-
T-code: SUIM --> roles -->roles by authrorization object
Enter authorization object --> Execute
Double click on roles --> Click on user
Regards
Sudheer

You do not have Authorization to read object 'xyz' Authorization Object

Hi,
     I am getting the following warning message while executing the query "You do not have Authorization to read object 'xyz' Authorization Object".
     I created an Authorization object.Assigned it to the role and assigned the user to the role.
Thanks

Hi,
I'm getting the same message, please if you find the origin of it, please let me know, If I find it, I'll let you know, ok?
   Thanks!!

Authorization OBject for Delete and Lock indicator in PO function.

Hiii
I'm using sap 5.0. I'm notice that we can set the authorization object to control the user from make a action for delete/Lock indicator in purchase order so that we can prevent the 'unpredictable user' from do the deletion on item PO item.
it also help me to authorize the selected user to perform delete or lock action.

Hi,
To prevent deletion or locking in specifically may not be controlled thro authorisation but changing the PO can be controlled.For this the authorisation objects M_BEST_BSA, M_BEST_EKG,M_BEST_EKO,M_BEST_WRK may be looked into .Here against Activity there is option like create,change ,delete,print etc which if suitably assigned can restrict the users for certain activity.Try with your basis team in this objects.
Dhruba

Authorization Object for Z Tcodes

Dear SAP Guru's
how to find authorization object for Z tcodes
e.g. in our orgnisation we have created report ZSR( Sales Register) and we want to restrict user for Plant & sales office
so where i can get authorization object.
kindly help
Thanks
Paramanand

Hi,
Goto T.Code "SUIM".
Click on "Roles".
Click on "By Transaction Assignment".
Enter your T.Code here i.e. "ZSR".
Click on Execute or Press F8.
You will identify the role assigned to it.
Copy that role.
Goto T.Code "PFCG".
Paste that role here.
Click on Display.
Goto "Authorisations" tab.
click on "Display Authorization data".
Goto Utilities-->Technical names on in menu bar.
Here you can see the authorization object assigned for this T.Code.
But in general all the Z transactions will be in S_TCODE authorization object.
Also,goto that T.Code.
Immediately after this enter,"/nSU53" T.Code.
Regards,
Krishna.

Authorization Object assigned to an User

Similar Messages

Maybe you are looking for