Authorization restriction at Sales Office level

Dear Gurus,
I need to restrict the user for all the sales transactions on the Sales Office level.
I mean the specific user should be able to create a sales order for the customer who comes under the Sales Office assigned to the user. User should view the sales order and invoice list for a specific sales office in VA05, VF04 also this is VF05N.
I tried to add the sales office field in std authorization object V_VBAK_VKO and did it but after completion of consistency check also the user was able to create a sales order for a customer belongs to the sales office other than assigned one.
For me it is mandatory to restrict the transactions and reports of SD at sales office level.
Please tell me if there is any way complete this restriction. Or to restrict the user from viewing the sales documents which are not created by himself only.
Your suggestions are also welcome. please suggest me.
regards,
Sanjay

Hi,
Check the below link, it might fix your issue.
Re: how to restrict the Report based on sales office
Br, Sats.

Similar Messages

Restrict the view for report MCSG on user ID level or Sales office level

Hi,
I need solution to restrict the view of MCSG report on user ID level or sales office level. he can able to view his own sales office data in report. Currently user able to view the all sales office data he is not restricted for same.
Can u Pl provide solution.
Regards
Tarunkumar

hi
check with your basis team they can restrict the usage of the t-code on the basis of activity (create, change, display), parameters like sales office, division, distribution channel etc.
saurabh

Restriction on Sales Office for Sales Transaction

Dear All
We have a requirement to restrict our derived roles for SD modules on division and Sales office. By default , division (org element) is coming in Auth tab , however sales office is not populated. Hence , as of now we are able to restrict on Division only.
To restrict on Sales office as well, i have followed below options:
1) Manually added object "V_VBKA_VKO" in profile and maintained field "VKBUR". ---- Didn't work.
2) Added object "V_VBKA_VKO" for va01 in su24. Then added va01 in role and restricted it for Sales office through "VKBUR" field. --- Didnt work.
Please help , how can we restrict this based on Sales Office also.
Regards
Urvish Patel

Hi,
Please troubleshoot as below,
Check if respective sales structure is maintained in SPRO to control it on sales office.
Put ST01 trace and see if any object is coming in the trace for sales office.
You have to maintain that object with respective sales office.
If you want sales office to come as org level you will have to define this field as org field with PFCG_ORGFIELD_CREATE report, (Please note once you convert this as org field it will be reflected for all objects which has this field.
Hope this helps you.
BR,
Mangesh

Plant restriction at sales order level by user

Dear SD experts,
Is it possible to restrict plant at sales order creation by user, if so, how this is to be configured.
my requirement is user shall not able to create sales order(sales document) for plants restricted.
pl help
thanx in advance
regards
Srihari

Dear Sir,
Wud like to explain what circumstances i am asking this restriction;
1. have total three plants - 1001, 1002,1003 & these plants are to three sales offices ie., SO1, SO2, SO3, respectively
2. material extended to above plants with purchase & sales views
3. I have three users user1, user2, user3 : these are are belong to three Sales Offices ie., SO1, SO2, S03 respectively,
4. I have three sales document types say sd1, sd2, sd3
Current settings are user1 can raise sales order for any plant ie., 1001, 1002, 1003, system is not stopping, as user1 is belong to Plant 1001 & Sales Office - SO1 only,
my requirement is system shud not allow if user1 is trying to raise sales order for other than Sales Office & Plant.
Hope u r clear about what circumstances I am asking this requirement.
Experts can help us without User Exit & SHDO, is there any solution for restriction plant.
Thanx in advance
Regards
Srihari

Restriction of sales office, sales group and plant

how can i restricts sales office, sales groups and plant for the different user.
there is no authority check at inquiry, quotation, sales order
please guide me
thanks

Dear varada rajan
If I understood your explanation correctly, while creating sale order via VA01, input options for Sales Office and Sales Group are not flowing and you want to flow these fields in VA01. Am I right ??
If so, go to VOV8, select your sale order type and execute. There you can see a field "Screen sequence grp." under the tab "Transaction flow". There maintain AU and save.
Now go to VA01 and check.
thanks
G. Lakshmipathi

Authorization object for sales office

Hi,
We have a requirement, we have one our head office and there are around 20 sales office, for each sales office there is a different user id (two user logins per sales office ), in customer master for each customer we are assignning one sales office, and only the user of that office is responsible for all types of transaction for that customer, we want that sales office assignment to user, and that user should not able to see the any details of customer like sales orders, billing details order booking etc. which is not in there sale sales office , so which authorization object, or how we can get this,
regards,
zafar

Hi
Sometimes when you add a new authorisation object with some specific value, system still allow to do the transaction for other values which is not available in that authorisation object, because may be in some other Profile same Authorisation Object is available and where user has complete rights, so kindly take the help of Basis Consultant and check that same Object is not availbale in some other profile of User with complete authorisation.
Thanks and regards,
Amitesh Anand

COPA authorization by sales office

Dear Experts
In my COPA environement we have many branches each branch is a cost center and sales office (one to one relation). In my KE30 report I want Mangers of each sales office to see their report only. In KE37 we are able to retrict users by company code but was unable to restrict by sales office. If I select the sales office in KE37, the users will be restricted if (*) is selected for sales offices, but if I choose one sales office the report will not be executed. I tried to develop a report where the sales office will be variable and should be selected in the KE30 report screen like compnay code, and period but I failed. Any input please.
Regards
Ahmed Zain Hassan

Hello Ahmed,
Please review and implement note 165087.
As soon as you created your own authorization objects in transaction
KE37 or KE97 and assigned it to a certain user the system checks the
user's authorization before he or she executes a report in transaction
KE30 or KE24.
Please read the description in transaction ORKE: > Tools > Authoriza-
tion Management > CO-PA-Specific Authorization Objects:
- Define Authorization Objects for the Information System (Text button
on the left).
Please also review and implement note 165087.
In order to analyze this issue please check the authorizations for the
relevant user in transaction SU01 and which authorization objects are
checked when this user execute transaction KE24 (> run a authorization
trace; transaction ST01).
Please ask your authorizations guy to check the customizing of the
authorization object again (on the basis of the documentation in
transaction ORKE and the authorization trace in transaction ST01).
Best regards,
Ronghua Fan

How to restrict the Report based on sales office

Hi Experts,
I am using BW 3.5. I have a requirement that my sales report should give output to particular user with his respective sales office only.
For Example :
User,   Sales Office
   A , Delhi
   B, Mumbai
User A should not be able to see the data of Mumbai Sales office. As both the users using the same Report,
Please suggest How to achieve this.
Helpful answers will be awarded.
Thanks&Regards,
Venkat

Hi,
To do this, you need to make the infoObject Sales Office authorization relevant.
Create an authorization Object using the t-code RSSM for this InfoObject. Restrict it with Activity.
Create a role for each of the Sales Office and restrict your authorization variable with that office.
Now you have 2 roles for eg. One for Mumbai, other for Delhi. Assign them to respective users.
Create a authorization variable for Sales Office and restrict your report with that.
Use the below documentation for creation of Authorization Object.
http://help.sap.com/saphelp_nw04/helpdata/en/a0/48f438f3422f2ce10000000a114084/frameset.htm
Regards,
Gaurav
Edited by: Gaurav Kothari on Sep 18, 2009 11:04 AM

Authorizations....Sales organization level

Hi all
I want to create the authorizations for the sales organization level. I have made the Sales Organization Object authorization relevant. After that i created an authorization object based on the Sales org object. I created a roles and created a profile based on the authorization object which i created. i assigned the role to the user.
Now when i execute my query in web it is saying that
'No Authorization (Or Everything is Filtered Out)'
On the top of the query execution it is giving me a message as
'You do not have authorizations for component 0CRM_OPMO_Q001'
Now i would like to know, when we create profile in the role, do we need to add any other authorization objects apart from the one which we created. If so, what options do i need to give.
And second when we create a test user for the authorizations testing, what roles we need to give him, one would be the one which we generated. And what are the other roles the user will have.
Please help
answers would be rewarded
regards
vijaykumar

If sounds like you have another authorization object
"checked" on the infocube/ODS.
To check this, you have two options.
(1)RSSMQ, with the user id. Execute the query, then back up (using the green arrow). One page on the back up operation with give you what authorization objects are checked.
(2) Go to transaction: RSSM and enter the infoprovider. Uncheck the authorizations you don't want to have verified.
Also, you on the variable for the authorization object (query) you must enter a value here if you do not have an "*" object.
Cheers!
/smw

Sales office specific authorization

Sir,
My user has multiple sales office , but they doesn't want one sales office has seen another sales office order document,delivery document and billing document , so how I restrict one sale office has not seen another sales office related document?
Please solve this problem as early as possible.

The scenario is as follows ;
sales organization-zxxxx (same for all sales office)
Distribution channel-zx (same for all sales office)
Division-zx (same for all sales office)
Sales Office-zx1,zx2,zx3....... (are state wise)
the client wants users from one sales office will not be able to create /display sales order for other sales office.
Please help.

Modification to Sales Office in Sales Order not resulting in Delta in BI

Hello,
I am experiencing a issue in delta update to 0SD_C03.
Any changes to the Sales Office in a Sales Order are not resulting in a delta update in 2LIS_11_VATIM OR 2LIS_11_VADHR.
This is resulting in erroneous reporting when looking at Sales Orders at Sales Office Level.
I would like to know any solution or work around for this issue.
Regards,
Ashutosh

Hi,
have made a trace after select a sales area, when the ddlb of the sales office was shown.
it seems there is no authorization check related to sales office restriction in standard.
you might consider to add your logic to
Class CL_BP_SALES_CORPACCOUNTOR_CN03
method GET_V_SALES_OFFICE
by enhance the component
BP_SALES
view
CorpAccountOrgEF
under context node
CorpAccountOrgEF
Hope this could do help!
Hongyan

Line items restriction in sales order

Hi,
how to restrict enduser to enter 10 line items if he enters more than 10 line items system has to restrict.What settings we have to done for this
Regards
Karthik.R

Hi,
There is no restriction in sales order level.SAP has given this facility for restriction in billing document
However you can use userexit SAVE_DOCUMENT_PREPARE in program MV45AFZZ in sales order creation creation program and write the desired code with help of ABAPer.
Reward Points if useful
Regards,
Amrish Purohit

How to define a user to raise sales orders in given sales office.

Hi,
Kindly help.
We have a requirement that we need to restrict some of the users from creating sales orders in some of the sales offices.We have a scenario in which all the sales offices are assigned to single sales organisation.But in authorisation tab,we do not have an option to restrict the sales office for VA01(Sales order T-code).We can only restrict any off the below given parameters but no sales office.
-Sales organisation
-Division
-Distribution channel
-Controlling area.
Please let us know how can we define a user to create sales orders in only some of sales offices.
Kindly help.
Thanks and Regards
Syamkrishnan
SAP Basis

hi,
u can control the same using basis authorisation. u can put the restriction on hte basis of the doc type and the sales order.
saurabh

Sales office authorization check in customer master,Sale order and billing

Hello Experts
We need to restrict authorization for customer master, sale order and billing based on sales office.
Can somebody guide me how to activate this ? Has anyone of you have successfully done that?
Regards
kumarlib

Hello Kumar,
User authorization is within Basis expertise, but if you want to get some feel for what authorization objects are take a look at trans SUIM. But basically how it works is for a given transaction the level of check is specified -- in this case Sales Office. Based on values stored in that field the user is allowed or not allowed transaction access.
So you determine whatever the needed matrix is for authorization restriction (i.e. user A can access Sales Office xxx, user B can access Sales Office yyy & so on). Also give Basis the transaction codes to restrict, along w/the technical table/field for each (like from customer master - KNVV-VKBUR, from sales doc level VBAK-VKBUR). Basis sets up the authorization object w/assignments to the users accordingly.
This is standard SAP & your Basis support should be familiar with it. Good luck.

How to restrict sales group and sales office in va01?

in transaction "va01" ,I want to restrict "sales group" and "sales office", but there is no
relative authorization object. I create a role named "z1000test001" with va01 , there are only "division","sales organization"
and "distribution channel" which could be restricted.
the authorization object with va01 is : V_VBAK_VKO.
and I find another authorization:V_VBKA_VKO ,which contains:"sales group" and "sales office",
but this one seems have no relationship with va01.
Is there any method to restrict "sales group" and "sales office" in va01?
Could anybody help me?

Hello,
This has been discussed before and there's a solution available.
Have a look at this thread: Authorization for Sales Office and Sales Group
Cheers
Jurjen

Authorization restriction at Sales Office level

Similar Messages

Maybe you are looking for