Authorization restriction for PM Order via PM activity Type.

Dear PM Experts....
There is a requirement to restrict order creation (Eg: PM07) for selected user group if they select particular PM Activity Type(ILART).
Is it possible to restrict authorization in such a way and What are the Authorization Objects that i have to change?
Thanks in advance..

Hi,
Use the authorization object I_INGRP for restricting at the Planner Group level along with the I_AUART.
At activity level might not be possible.
Thanks
Sunil

Similar Messages

Authorization restriction for purchase order release

How to restrict the authorization for particular authorization object with respect to roles.
Example: I am having below three release roles for purchase order.
1.     Regional Commercial Head
Below objects are assigned to it.
M_BEST_WRK u2013 Plant 1000 with value 02
M_EINK_FRG u2013 with release code A1
2.     Regional Commercial Head
Below objects are assigned to it.
M_BEST_WRK u2013 Plant 2000 with value 02
M_EINK_FRG u2013 with release code A1
3.     National Commercial Head
Below objects are assigned to it.
M_BEST_WRK u2013 All plants with value 02
M_EINK_FRG u2013 with release code B1
All the roles are for releasing a purchase order. My requirement is I had assigned 1st and 3rd roles to a user. That user should not be able to release a purchase order with release code A1 for plant 2000.
How to make it possible?
Pls help

u have 2 aothorisation M_BEST_WRK and M_EINK_FRG
while giving authorisation condsider both
say for ex user 1 give authro for M_BEST_WRK all paants and M_EINK_FRG B1
user 2 give authro for M_BEST_WRK 1000 and M_EINK_FRG A1
user 3 give authro for M_BEST_WRK 2000 and M_EINK_FRG A1
so the user authorised to particular authorisation will be able to release correct po only
hope this helps

Authorization restriction for Goods issue against an Order

Hello All,
We have a situation wherein the user is able to issue goods using tcode MIGO by choosing Goods issue --> Others and mentioning an order number that belongs to another plant in the account assignment tab and issues a material which belongs another plant.
For eg we have material A that has been created for plant 1. The user issues the material (movement type 261)and the account is assigned to an order which has been created for plant 2.
I could not find any authorization object that restricts this.
I checked the objects M_MSEG_BWA and M_MSEG_WWA and he has authorizations only for plant 1 and all movement types.
Any pointers to restrict this access will be appreciated.
Thanks & Regards,
Subramaniam Iyer

Hi,
MIGO transaction by default restricted with Plant. If you say that the user A is having access to only Plant 1 & 3, but not for 2, please check the below authorization objects does not have any manual objects inserted into the Role and restricted with the value only in organization field.
M_MSEG_LGO
M_MSEG_WMB
M_MSEG_WWA
M_MSEG_WWE
This issue may occur because if the objects are maintained manually in the role. If so, when you check in the organization field, it may not be showing the value which are manually added into the manual object.
Also, please check the other roles are assigned to the user. If any of the other roles assigned to the user having any of the above objects with * value, this may provide the user to do the Goods movement for any plant.
To check the issue, please go to SUIM and check the user under "Roles by Complex Selection Criteria" and make sure that you are checking the objects for the particular user. This should be able to identify whether the user is getting access from any other roles assigned to the user.
Regards
Anandm

Authorization check for production order settlement

Hi All,
Production order settlement currently can be done by any user of any company code. there is a high risk involved in the same since unauthorized postings may happen. Hence we need to add authorization check for production order settlement. Can we maintain the same at the plant or the company code level?
Waiting for your replies. Thanks in advance!
Regards,
Aman Goel

hi
What venki has told abt the exit, its absolutely correct.Even i have used the same exit
     From table CAUFV pick Material(PLNBEZ),Basic Start Date(GLTRP),Plant(WERKS) .
     Pass parameter Material(PLNBEZ) and Plant(Werks) in table MBEW in respective fields i.e. Material(MATNR) and Plant(WERKS).
     Pick the latest record for the current period(LFMON) and year(LFGJA).
     Pick Product Cost Estimate number(KALN1) from the record and pass it to table KEKO.
     Check if Production Order Basic Start Date(GLTRP)<= BIDAT, if NO post Error Message.
This is the FS for EXit PPco0007
Reward if useful
Amit

Authorization object for Internal order

Hi experts,
My requirement is while creating the PO using the internal order as reference i need to check the internal order is valid for that user or not.
Is there is any standard authorization object for internal order is available using which i can validate the internal order by assigning this authorization object in the user role.

Hello,
When you try to create internal order and once you get the error.
Open another session with /OSU53
This gives you the details of authorization objects or transaction codes you are lacking.
Provide this to security administrator of your team.
Hope your problem will be solved.
Regards,
Ravi

Authorizations: restrictions for InfoObjects and InfoProvider

Hi Gurus,
I am trying to define authorizations via RSECADMIN in 7.0 for a specific InfoObject and specific InfoProviders. The situation is: I want user USER1 to see only Company 4360 on Cube 'XXXXX', but he must be able to see all the Companies in all the other Cubes.
I have used in RSECADMIN the icon "InfoCube Authorizations" to introduce the single Cube and corresponding single values for my Company, but it seems that the system use this restriction for all the Cubes.
Please help me.
Ciao.
Riccardo.

Problem solved.

Authorization Object for Purchase order Message control

Hi ,
Is there any stadard authoriztion object to control the print and print preview options for Message control .
I am requied to control the print and print preview options for purchase order messages for certain users depeding on there authorizaion.
Thanks in advane.

Hi,
When you click on the 'print preview' button on ME22N/ME23N the system
makes an authority check on transaction ME9F activity 04. The current
logic forces the print preview functionality to be accessed ONLY by the
users who print. Therefore, only users that have authorization to use
ME9F are authorized to use the Print Preview button in ME22N/ME23N.
Kindly try the authorization objects M_BEST_EKG, M_BEST_BSA and
M_BEST_EKO = 04.
You can
also have a look the user exit
EXIT_SAPLMEDRUCK_001 in enhancement LMEDR001 for print program
SAPLMEDRUCK.
INCLUDE ZXM01U04
you can create own coding for all possible AUTHORITY-CHECK.
BR
Nadia Orlandi

Plant level authorization control for Internal Order

Dear Sir,
We create Internal Order using tcode KO01 and being a multi plant scenario , we want to have an authorization control on Internal Order creation/change so that plant or profit-center level authorization rights can be given to the users .
We request you to Kindly guide us about the steps to be followed for addressing such requirement .
With thanks and Regards
Sonia Agarwala

Sonia-
It can be done. You have two options.
1. SAP security - when your security person can limit a user by plant, profit center etc using authorization objects.
2. Validations - Here you can create a validation where you define you logic. In your logic you can restrict set of users who can access a set of fields (profit center, plant etc). If he deviates, the system can issue error messages which is maintained in validations. Use transaction GGB0 to create validations.
Hope this helps.
Shail

IORD for sending Order via Idocs

Hi SAP Experts,
Does anybody know how to use T-Code IORD for sending Idocs, every time I run this T-Code not a single Idoc gets created.
Also I would like to know what does 'Status Profile/User status to be set' mean on the selection-screen, I think its happening due to this only.
I've done lots of Idoc Integration using HR Idocs but this is a first Idoc Integration for me in PM module so not sure what should be the best way of sending Order via Idocs to 3rd Party system.
Any help would be appreciated.
Thanks,
Sunny Thakur

Hi Pete,
We are trying to send SAP PM Work Order for production equipment changes , I came to know that IORD generates Idocs for Order but somehow whenever we try to run this T-Code all the orders are getting rejected. Also I've noticed Idoc Type IORDER cannot be used for sending Delta changes , is it true? I can't find any entry for this message type in BD60 so makes me think SAP did not design this Idoc type for delta changes, even though I know we could customize it
Do you know what should be the best way of sending SAP PM Work Order to external system , should we create one custom Idoc type?
Let me know in case you could help me out.
Thanks,
Sunny Thakur

Authorization restriction for CRM 2007

Dear Experts,
We are in process of defining the authorization matrix for CRM 2007 for end users who will be using Web UI.
Here my requirement is the service orders created by USER1 should not be displayed by USER2 and vice-versa when they do a search in both Web UI and GUI in Tx CRMD_ORDER for service orders.
Please let me know how can I acheive this and what is the auth. object for the same.
Thanks & Regards,
Sharath

Dear babu,
If I understood your request, you want that, only one user will be able to access the document. If you want to do that, this is the answer:
At tcode PFCG you shoud set:
First you must set what type of document will be avaible to the user, in this case Z020.
CRM_ORD_PR: PR_TYPE 'Z020',ACTVT '*'
Next you must set which activities they will be able to do (notice, you must set the same field in the previsou object(
CRM_ACT: ACTVT u2018*u2019
And then you set which partner function or partner category are able to access the document, here is the main point !
In this example I set that only users who has Partner Category (not partner function) Employee Responsible (std partner category 0008) are able to access the document
CRM_ORD_OP: ACTVT '', PARTN_FCT '', PARTN_FCTT '0008'
Here you can notice again field ACTVT, here you will set what user are able to do, "*" means everything, "1" = create, "2" = modify, etc. (I can see the list at PFCG, adding the auth. object to the PFCG profile).
I notice only std partner function or partner category works with this object. I sent a message to sap support, and they confirm that, so if your user has Z partner funcition or category it is not possible to do that.
Summary, your user must be present in the partner list of the document, and they must have a partner function or partner category std. It is possible to set together both values PARTN_FCT and PARTN_FCTT, but I think it is not necessary.
The easy way to do that is, user who will be able to access the document, must be the employee responsible.
This help is very usefull
http://help.sap.com/saphelp_crm60/helpdata/en/4a/b9f63a8ab2c745e10000000a114084/frameset.htm
Regards,
Lalas
ps.: As you should know, only one partner function must have partner category Employee Responsible, in the partner det. procedure, otherwise, you will get error message in your application.

Invoice for Service order if POD activated

Dear all,
I have a query regarding the invoice creation for service order.
Scenario is like, I have activated POD for customers. when I create a sales order for a product I have to create delivery for that sales order also. but I cant create invoice as I have activated POD for that customer. So I have go for POD first then only i can cretae invoice. This is ok with me.
But I want to know
1) if I create a sales order with service item for same customer can i create invoice also? as delivery wont be there for service item. Will system allow me to create invoice with the reference service order?
2) will system allow me to create cash invoice for Cash Sales order also? (with ref of cash sales order )
thanks in advance
Sanju

Hi
You can try FB70 T code.
Best Regards

Output determination for sales order via email notification

Dear All,
Can some one provide me a step by step configuration guide for Output determination via email notification.
I would appreciate for your prompt response.
Thanks
ANGKS

Hi there,
For getting output Email or any media you have to do output determination. output determination is also carried by Condition techniques.
Configuration path: (following are the steps)
1) SPRO-> IMG-> Basic Functions-> Output Control-> Output Determination-> Output Determination using Condition Technique- >Output Determination for Sales Documents .
2) Create Condition Table: select the field Sales Doc Type from field catalog & Save
3) Maintain Access Sequence: 4-digits code & description.
4) Assign condition table to access sequence. Select Accesses line item and Go To Fields. Fields will display the fields we have selected in the condition table i.e. sales doc type. Maintain Output Types:BA00: Order Confirmation Select BA00 & Copy & Rename. Give the same 4-digit code as given to access sequence. You Can Maintain: Languages of Output Partners (to whom you need to send output) Print Program- print specification Sap Script- layout Assign Output Types to Partner Functions: go to new entries & assign your output type to partner functions. Maintain Output Determination Procedure: V10000 (Standard Procedure)here you select communication medium Email.
Go to new entries and create your own 6-digit code with description. Select the procedure, go to Control Data. Here mention the output type i.e. condition type and leave requirement and manual only columns as blank. Determination Rule: link the 6-digit procedure code to doc types. Create Condition Records: VV11. Select document type and click on Communication. Mention partner function, medium, time. Output device: LP01, Spool request Name: SD_003, Suffix 2: order_confir & flag on print immediately. Once you press enter you will come across 2 key combinations: Sales organisation/ Customer Number: fill SO, Customer No, Partner Function Abbreviation, Partner to whom the output should be sent, time, medium, language. It contains: Sales Orgnisation, Customer, Partner Function (The abbreviated form of the name that identifies the Partner) (During output determination, the system determines the recipient of the output from the master record for the specified partner function. In this field, you can explicitly specify a recipient that will override the standard partner. There must also be a master record for the partner that is specified explicitly.), Medium, Time & Language.} Order Type: Document Type, Partner Function (abbreviation), Partner, Medium, Time & Language. Path For Output Determination For Sales Documents: Logistics -> Sales/distribution -> Master data -> Output -> Sales Document -> Create (t-code VV11) Path for Output Determination
I hope this will help you.....
Regards
Deepak

Restriction for Sales orders due account category

Hi All
I want restrict some sales order types due type of account (individual or corporate). For example when i creating order of type A , it must can only been created with assignment of corporate account. Does anybody solved this problem? It's doesn't seem very complicated but i have no clue at all.
Regards,
EL

Hi Raghu
Thanks for the reply...I was looking to get a list of sales orders due for billing, rather than checking for the status of a single one.
Are you suggesting I do a query on VBUP table?
Cheers
/Arun

Add new authorization object for production order creation/change/display

As mentioned. I definded new authorization object using "Production scheduler" (Field Name : FEVOR) by SU20. then use SU21/SU24 to add authorization object for some transaction code such as COOIS. use PFCG maintain new role and assign a fixed production scheduler value and assgin transaction code COOIS to this role. create new user ID and assign to that role.
logon system with new ID, run COOIS. but system don't check new authorization object(production scheduler). who can tell me why it is and how i can add new new authorization object for standard transaction code?
Thanks.
Kevin.WU

Hi,
there is an icon of generation. just click there in PFCG and also in su21.
then add this object in new role.
Assign this role to user id
while assigning the role also there is a generation.
Please take a help of BASIS consultant also as this is entire a BASIS process.
Regards
Amit parkhi

Authorization restriction for Goods issue . others radio button in migo tcode

Hello All,
We have a situation wherein the user is able to issue goods using tcode MIGO by choosing Goods issue --> Others and the movement type 201
the above mentioning details i need to block the others tab only for specific user ids i have checked the MIGO objects But its not worked
please give me solution for block the others button on the drop down box
please find the attachment of screen shot its helpful to sort out the issue
Best Regards
suresh

Dear Anandan,
Please use trace t.code ST01 to fix the issue.
You can restrict the movement type using the authorization object M_MSEG_BWA.
If you can provide the step by step screens where you want to exactly restrict we can fix it.
Regards,
Venkatesh

Authorization restriction for PM Order via PM activity Type.

Similar Messages

Maybe you are looking for