By what ways the upper company can control the business of lower company?

Question

Hi,dear gurus
It is a multi-organizational company.   the headerquater want to take the strict and aslo flexible control over lower companies such as subsidiaries,branches.
I need the control of three areas including  master data, business workflow and the  elements of business workflow.
First,take the customer information for example:
customer information: 1: the headerquater define basis information of customer and assign them to all lower companies. how to do it?
2: at branch A company, only the purchasing info of the customer master data is allowed to update. how to fullfil this kind of control?
About sales workflow.  I want to all subsidiaries company (not branches companies) create the invoice based on the sales order.  how to  define it at the headquarter and assign them to subsidiaries ? and what to do to prevent this workflow from being updated by subsidiaries,you know,there are more 50 subsidiaries companies.
As of elements of business workflow. I want to define such as the delivery tolerance(or other elements) for all lower companies who have to take account into delivery tolerance when processing sales order. So the headquarter can update the value of any those elements and apply them to lower-company  without extra monitoring and checking  because of  the strict control fullfilled by software.
So,in summary,I need to implement the strict and flexible control over lower companies from virious perspective such as master date,busiess flow and the detailed elements in buiness flow and etc.  
How to do it .   Please give me so ideas or clues .
thank you very very much plus so so much!!!
Edited by: humility on Dec 9, 2008 5:30 AM

Answer 1

Dear Humility,
This is, in general, a basic requirement-type for all the Multi-level structured Organizations.
These kinda control, are basically defined and achieved via various Profiles for Roles, for different transaction-types, based upon Authorization Data and Profile (i.e. Sales Area, Doc. types and Activities etc.).
Based upon the Business requirement, you may create specific Roles (with the help of BASIS, in T. Code: PFCG).
Once created, the same will be assigned in to User-Profile (individual or Group) in T. Code: SU01.
While, maintaining Roles, Basis will restrict Auth. Data, for various Modules (in your case, Sales and Distribution). as per requirement.
Best Regards,
Amit