Authorization to delete

Using transaction PU00 giving the user authorization to delete an employee.
I want to permit the user only to delete the employee.
I dont want to give a permission to read or write or update. Only delete. How can I do it

Hi,
I advise you to make test of these transaction (it will be better if a functional employee of HR help you to test). Add these transaction to a test role in QA or DEV client.
Using Authorization trace (via ST01), check the authorizations the Tx need to delete, read, create or modify. Check the auth. objects and values. As for sure, there will be an object wich demands activity 01, 02, 03 and etc. Usually, activity "06" is for delete, "03" read, "01" create, and so on.
Then restrict the values to the activities you want. Then, you can restrict these objects in all roles that belongs to users wich you want to restrict activity (don't forget authorization addition)
Reward points if helpful....
Cheers,
Rakesh

Similar Messages

Remove authorization to delete Opportunities and Activities

Hi ,
The requirements are that the user can create and change Opportunities and Activities , but not Delete Opportunities and Activities .
I did generate a PFCG role from the Business role , but cannot find the correct object to deactivate/remove from the PFCG role
Thank you.

Hi ,
Thank you , but the "Trash Can" in the WebUI is still accessible , the user gets an error log , but is asking from the "Trash Can" to be grayed out . Can we do that ? I was looking at Authorization Object UIU_COMP , but could not find a related activity .
Regard's
Edited by: Christophe Schutz on Oct 5, 2010 10:05 PM

Authorization to delete Background job

Hi ,
I am trying to find out the authorization required to delete a background job.
i have created a test role that does not include the S_BTCH_JOB with activity DELE.
Also it does not have access to S_BTCH_ADM as "Y".
Still user assigned to this test role can delete Job.
I am not able to find anything in trace.
Anyone can help me to suggest what other authorizations are checked for deleting a background job.
Kyle

For own job no special authorization (S_BTCH_JOB DELE / S_BTCH_ADM) is require. Read documentation for background authorization for more details.
Edited : Mine sounds like echo... post nearly same time... :-). Additionaly I missed Plan B. But Plan A is popular in some organization.
Regards,
Arpan Paik
Edited by: P Arpan on Aug 23, 2011 10:48 AM

How to remove the authorization of deletion in vl02n

Hai
i want to restrict my users deleting the vl02n ( delivery )
i have checked the objects but not supporting
can any one help me in this regards
Thanks and regards
kumaraswamy

I also had same issue and after spending some time I manage to found solution. This is explained in OSS note 580226. First we need to add activity '06' in authorisation object V_LIKP_VST and then add following code in delivery user exit MV50AFZ1.
FORM USEREXIT_DELETE_DOCUMENT.
*>>>> START OF INSERTION <<<<
authority-check object 'V_LIKP_VST'
           id 'VSTEL' field likp-vstel
           id 'ACTVT' field '06'.
if sy-subrc ne 0.
   message a001(ZZ).   "Use own error message here
endif.
*>>>> END OF INSERTION <<<<<<
ENDFORM.
In this way we can restrict user to have 'Delete' delivery authorisation or not.
Regards,
Sanjay

No authorization for backgroung user for log deletion

Hello,
I have included program SBAL_DELETE in a process chain in order to delete expired application logs periodically. But it doesn't work because I get always this message from backgroung monitor: "You do not have authorization to delete all these logs".
If I run program manually via SLG2 it works correctly.
The background user has profile S_BI-WHM_RFC.
Can anybody advice what am I missing?
Thank you.
Branislav

Hi Branislav
For the administration processes that are bundled in a process chain, you require authorization for authorization object S_RS_ADMWB.
To work with process chains, you require authorization for authorization object S_RS_PC
Check this link
http://help.sap.com/saphelp_nw04s/helpdata/en/e3/e60138fede083de10000009b38f8cf/frameset.htm
Regards,
Naveen

BI7 : Transport deletion of analysis authorizations

Hi,
I was just wondering if it is possible to transport the deletion of analysis authorizations exactly as we do for roles.
Do we have to first create a transport request with the analysis authorization before deleting them and then transport the request or do we have to delete them manually on each system?
I checked in the documentation but I didn't find anything similar.
Thank you in advance for your help.
Regards,
Vince

Hi Gowrinadh,
Thank you for your answer. I already worked on the analysis authorization concept and I have seen this blog while I was searching for an answer regarding deletion but unfortunately there is no explanation about it.
I was just wondering if it is exactly like in PFCG because there is no pop-up message in RSECADMIN explaining that it must be added first to a transport request.
According to Zaheer it works exactly the same so I will test.
Thx for your help .
Edited by: Vince Bl. on Mar 18, 2009 6:04 PM

Authorizations - Deletion of 'Standard' and 'Maintained' authorizations

Hi friends,
Under Role Maintenance I seek to delete a particular authorization with the status "Standard" or "Maintained".
However I am unable to do it and I get following system pop-up -
Only modified and manual authorizations are deleted.
Authorizations with the status "Standard" and "Maintained" are kept.
So issue here is - How do I delete such "Standard/Maintained" authorizations?
One work-a-round is to de-activate the particular authorization, but that's elementary. If I wish to delete it, what's the solution?
Kindly advise.
Regards,
Vj Vijay

Hi,
The price calculated in a standard cost estimate that has been released is written to both the Current planned price field and the Current standard price field.
The price in the Current planned price field remains constant until the standard cost estimate is released in the next period. The current planned price documents the valuation of the material in the itemization of the standard cost estimate for the higher-level material for the period.
The current planned price will get affected when CKR1 is done
If the standard price is changed manually (MR21) during the period, all material stocks are revaluated with the new standard price. Manually changing the standard price will change the price in the Current standard price field but not the price in the Current planned price field.
If the standard cost estimate is released for the next period, both fields are updated with the new price from the standard cost estimate.
In material costing, you can define a strategy for material valuation that accesses the value in the Current planned price field.
Material movements are valuated with the price in the Current standard price field
Hope this will clear all your doubts
Best Regards

System exception while deleting the file from app server in background job

Hi All,
I have a issue while the deleting the file from application server.
I am using the statement DELETE DATASET in my program to delete the file from app server.
I am able to delete the file from the app server when i run the program from app server.
When i run the same report from background job i am getting the message called System exception.
Is there any secuirity which i need to get the issue.
Thank You,
Taragini

Hi All,
I get all the authorization sto delete the file from application serever.
Thing is i am able to run the program sucessfully in foreground but not in the background .
It i snot giving any short dump also just JOB is cancelled with the exception 'Job cancelled after system exception ERROR_MESSAGE'.
Can anybody please give me suggestion
Thanks,
Taragini

Authorization group in GL A/C using FB01

HI, We have activated the authorization Group in GL A/c. Using the authorization object F_BKPF_BES we were able to create restrictions on other tcodes like F-28 . However when using the u201CFB01u201D tcode, the authorization check does not have any effect. I have already check the authorization in SU24 for fb01 and status is set to YES. I have also created a trace(using ST01) for this transaction but ST01 does not show any authorization trace for F_BKPF_BES.

Hello,
Authorization object：F_BKPF_BES should be checked when you run FB01.
In your case,please try to check the following points:
1.Authrization group was assigend to G/.L master data correctly.
2.Authrization group was assigend to object：F_BKPF_BES correctly.
3.Avtivity was defined in this object correctly.
4.Role was assgined to user correctly.
5.SAP_ALL authorization was deleted from the user profile.
Note: it is impossible to define the authorization group as ' '(space) in object：F_BKPF_BES,
if ' ' was defined, system will consider there are no any setting existed.
Hope the above infor. could help you to solve this issue.
Best Regards,

Need to delete / clear PO value for a deleted shopping cart item.

Hi friends
Please help me on below mentioned issue.
I have a shopping cart with one deleted item, That deleted item shows a PO number under table BP_PDBEI field BE_OBJECT_ID in production server.
User want that PO number to be delete or clear from that shopping cart deleted item.
We are not authorize to delete or clear a entry from the SAP standard table itself.
Is there any function module, I can use directly in production server which can delete / clear this PO number from table BP_PDBEI field BE_OBJECT_ID from shopping cart deleted item
Please help urgently.
Thanks a lot in advance.

Hi
check this FM
ISM_PORDER_DELETE
ISM_PORDERNEW_DELETE
ISM_PORDERRET_DELETE
Regards,
Viquar Iqbal

Need to delete PO value for a deleted shopping cart item.

Hi SRM experts
Please help me on below mentioned issue.
I have a shopping cart with one deleted item, That deleted item shows a PO number under table BP_PDBEI field BE_OBJECT_ID in production server.
User want that PO number to be delete or clear from that shopping cart deleted item.
We are not authorize to delete or clear a entry from the SAP standard table itself.
Is there any function module, I can use directly in production server which can delete / clear this PO number from table BP_PDBEI field BE_OBJECT_ID from shopping cart deleted item
Please help urgently.

Hi Sharma,
normally if this PO doesn't have further follow-on documents, should be able to be deleted. Once the PO is deleted, the SC will be updated and in the follow-on document history of the SC you will see an additional remark "follow-on document deleted".
But I guess, this is not what you would like to do.
Without manual database changes you won't be able to delete the connection between the SC and PO.
If you somehow will get authority to the database changes, please don't forget to delete also the relations between PO and SC. You will find it in the tables SRRELROLES and BBP_PDBINREL.
Regards,
Peter

Problem in deleting a request from Dso

Hi Experts,
I have loaded the request into DSO, after activation, i have changed the QM status to red and try to delete it from the manage screen. But it is not getting deleted from DSO.
I have used following tables :
RSREQDONE
RSICCONNT
RSODSACTREQ
For deletion purpose, but i'm not provided with authorization ..
And also i have used FM to delete the request from DSO , but it also failed ..
Can you please help me out in this regard..
Thanks
PT

Hi,
Please check if your DSO is locked by any other process. You can check the lock status from SM12. If your DSO is locked by some other process, you will have to wait till that process finishes or kill the process if it is not required so that your DSO will be unlocked. Once your DSO is unlocked you can retry activation. If this doesn't work, please check if you have the authorization to delete data. after trying to delete the DSO you can run the transaction SU53 to see if there is any authorization failure.
Hope this helps you.
Thanks,
Nithin Reddy.

Unable to delete saved Crystal reports in SAP BW Browser

Hi everyone ,
We are trying to test Integration of Crystal reports with SAP BW .
CR developer version installed - 12.0.3.900
SAP BW 7.0
I have 2 issues :
1) When I try to open SAP Query from CR SAP menu bar , somehow a blank SAP screen opens first and stays as long as I have CR developer open. I would then have to click on CR from the status line to begin using the software. The blank screen remains the way it is.
2) I am unable to delete Crystal reports which are saved in SAP BW Browser . I can delete any other BEX workbook in the same folder .
Am I missing any role authorizations to delete Crystal reports in BW Browser ?
Thanks in advance for your help.
Hitesh

HI,
1) When I try to open SAP Query from CR SAP menu bar , somehow a blank SAP screen opens first and stays as long as I have CR developer open. I would then have to click on CR from the status line to begin using the software. The blank screen remains the way it is.
>> Did you also install the SAP Integration Kit ?
2) I am unable to delete Crystal reports which are saved in SAP BW Browser . I can delete any other BEX workbook in the same folder .
Am I missing any role authorizations to delete Crystal reports in BW Browser ?
>> Most likely you are missing authorizations
Ingo

No Authorization

Hi Experts,
Iam working as sap bi consultant and have issue regarding authorization when i try to save the workbook iam geting below error . can any one please guide me on this issue.
Message
RSOBJS 176 No authorization to delete object WB:EQYX7UM6IBHNWSRCTQ46KKTXF
Regards
Rk

Hi ,
When you get this authorization error, go to SU53 T-code and run then you can get missing authorizations in your SAP role.
Regards
Nagaraju

Block deleting DMS Document from user that is not initiator

Hi All
Hello
I Want to Block deleting DMS Document ((CV02N)
form all users that are not the initiators of the Document or
Bolcking for all user
for that I created new user authrization for CV01N,CV02N
without authorization for delete
I created a DOC in SPS (production) No 3001591
but I successed to delete the doc through cv02n
in the buttom icon for delete original
There is an option to block any user or specific form delete document ?
If there is no option for that there is an user exit that I can used ?
Thanks in advanse for your help

Hello,
it is possible to extract DMS's file to application server directory:
FUNCTION Z_DMS_VIEW.
""Interfase local
*" IMPORTING
*"     VALUE(DOC_NUMBER) LIKE BAPI_DOC_DRAW2-DOCUMENTNUMBER OPTIONAL
*"     VALUE(DOC_PART) LIKE BAPI_DOC_DRAW2-DOCUMENTPART OPTIONAL
*"     VALUE(DOC_TYPE) LIKE BAPI_DOC_DRAW2-DOCUMENTTYPE OPTIONAL
*"     VALUE(DOC_VERS) LIKE BAPI_DOC_DRAW2-DOCUMENTVERSION OPTIONAL
*"     VALUE(ORIGINAL_PATH) LIKE BAPI_DOC_AUX-FILENAME OPTIONAL
*" EXPORTING
*"     VALUE(P_RETURN) LIKE BAPIRET2 STRUCTURE BAPIRET2
*" TABLES
*"      DOC_FILES STRUCTURE BAPI_DOC_FILES2 OPTIONAL
CLEAR:   doc_files.
REFRESH: doc_files.
DATA: i_doc_files like bapi_doc_files2.
DATA: i type i.
i = 2.
while i = 2.
   i = 2.
endwhile.
CALL FUNCTION 'BAPI_DOCUMENT_CHECKOUTVIEW2'
    EXPORTING
      DOCUMENTTYPE    = DOC_TYPE
      DOCUMENTNUMBER = DOC_NUMBER
      DOCUMENTPART    = DOC_PART
      DOCUMENTVERSION = DOC_VERS
      DOCUMENTFILE    = i_doc_files
      GETSTRUCTURE    = '0'
      GETCOMPONENTS   = 'X'
      ORIGINALPATH    = ORIGINAL_PATH
      HOSTNAME        = ' '
      GETHEADER       = 'X'
      PF_HTTP_DEST    = 'SAPHTTPA'
      PF_FTP_DEST     = 'SAPFTPA'
    IMPORTING
      RETURN          = P_RETURN
    TABLES
      DOCUMENTFILES   = DOC_FILES.
ENDFUNCTION.
ORIGINAL_PATH must be a directory of application server.
By background is not possible (I don't know how can we do that) download thsi file to PC.
Then with the file in application server we can :
- to map application server directory in a drive unit of Pc
- to transfer with a ftp client from Pc
- rfcexec
But always the bapi can not download the file: it must be a process in Pc who transfer the file.

Authorization to delete

Similar Messages

Maybe you are looking for