Central release dependent infos on standard org. level fields

Dear gurus,
Does anyone know whether there is a central note on which fields SAP promotes to org. levels? I could not find one and think it would be very usefull to be able to look into the future.
In saprel 7.02 the are some fields which are now org. levels which would have been usefull to know in advance. We can alsway downgrade them if we dont agree but knowing what is in the pipeline would be very usefull (I can only assume SAP put a lot of thought into them, but I might have mainained them differently in the same role).
An example is the Authorization Group field of s_user_grp...
Cheers,
Julius

Can't answer your question; but thanks for heads up! I'll have to keep this in mind when we upgrade.

Similar Messages

  • User group [$CLASS] not an Org level field in IA, whereas it is in DA

    Hi All,
    We have an authorization problem that we faced while SAP Upgrade. In the development system while we upgraded all the roles, we did not face any issue. User group field [$CLASS] was actually an org level field in that system and the roles were upgraded based on that condition.
    When the Integration system was up and the upgraded roles were transported to IA, we noticed that they ended with a warning. On checking the logs we found out that User group [CLASS] actually was not an Org level value in the INtegration system, whereas it was an org level field in the development system.
    Can someone tell me the reason why it is different? Is there any settings we have to change to make User group  an org level field in IA. Thanks a lot for your help.
    Vijith

    Hello, I ran into this also and found these notes to explain why this is suddenly an org value and how to fix it:
    http://search.sap.com/notes?id=0001580048
    http://search.sap.com/notes?id=0001739055
    Basically, GRC 10 add-on makes the user group an org value and the note instructs how to undo this manually, but there is a required pre-requisite because you cannot modify this for SAP delivered fields normally.
    You know what else would be nice.... maybe there's a note that explains why Account Type is an org value.  It REALLY should not be, IMO.

  • ERM -- unable to determine matching org. level for BRGRU in the system

    Hello,
    I have a problem.
    When I trY to import in the ERM (SAP GRC AC 5.3 SP5) a mass import of roles (derived roles) using the template Organizational Template.
    Some of the roles gives me this error:
    "Role not imported; unable to determine matching org. level for BRGRU in the system".
    In the file I put for example
    ZAPVAPINTE     BUKRS     0083
    Am I doing it right? or do I have to put $BURKS?
    Best regards.
    Pablo Mortera.

    I have found that when you run the background job "syncronization of the organizational values" it pulls the org value name and all "values" assigned to it.  If you don't have values specified (on the table level) for the org name, you get this error.  We have many fields that we use values for these fields but they aren't specified in the table.
    For example:  We have the org value "PLVAR" with the values "AL", "01", "02", "03", and "GB" assigned to it.  You can actually see these values in the backend system using SE11.  We do not get this error on this org value.  However, we have another org value "SACHZ" that we use, but we do not have any values assigned to it on the table level, so it is giving us this error.  We are trying to find out how to populate the "values" field since this was not done through configuration.
    Here are the steps:  (1) Go to SE11 in your backend system.  (2)  Put your org value (example:  PLVAR) in the "DATA TYPE" field and click display. (3) Double click on the Domain name.  (4)  Go to the Value Range Tab and click on the "Value Table" name if there is one.  This is the table that has the org values assigned in it - normally done through configuration. (5) go to Utilities --> table contents --> display.  (6) execute the table contents.  These are the values that the sync job pulls over.  If there are no values there or if there is no "values table" name, you get the error.  If there are values there, you don't get it.
    We are working with our technical team to get the values in these fields to see if that works.  Another quick way to see if there are values assigned to the org field is to use "Org Value Mapping" in ERM.  Select the "derived org level field" you want to see and click on the "org value from" magnifying glass.  If no values are there, a "values table" hasn't been populated in SE11. 
    It doesn't make much sense to me though because we can still use values for these fields for our derived roles....we just don't populate the table with them.
    I'll update this message if we find a solution.
    Thanks,
    Peggy

  • Vendor - MArk for Deletion at Comp code & Pur Org Level

    Hi Gurus
    I want a list of vendors (about 150 Vendor)  to be  Marked for Deletion at Comp code & Pur Org Level  
    How to proceed ?

    hi,
    To be able to archive, you must set the deletion flag in the master record. You can set this flag for a complete vendor or for individual company codes or purchasing organizations.
    You can archive data from different tables using the archiving object FI_ACCPAYB...
    Mark a vendor for deletion centrally as follows:
    Choose Master records ->Maintain centrally -->Mark for deletion.
    The initial screen appears.
    Enter the vendor account number and, if you wish, the company code and a purchasing organization.
    If you do not specify the key for a purchasing organization, you cannot delete this area at a later date, should you wish to.
    Select ENTER .
    The screen for specifying data for deletion appears.
    Select data to mark for deletion by clicking next to the appropriate field.
    Save your entries by choosing Vendor ->Save.
    The system displays the initial screen, with a message confirming that the data has been saved.
    Mark a vendor master record for deletion for the Accounting Department as follows:
    Choose Master records -> Mark for deletion.
    The system displays the initial screen.
    Enter the vendor's account number and the company code.
    Select ENTER .
    The system displays the screen for selecting areas to mark for deletion.
    Select the data either in the company code or in all areas to mark for deletion.
    If you click next to the All areas field, the system will later delete all data for all company codes and for all purchasing areas in this vendor master record.
    Save your entries by choosing Vendor -> Save.
    After you mark a vendor master record for deletion, you can still post to the vendor account. This is necessary, since you might still need to clear open items. When you post, the system issues a warning that you are posting to an account that is marked for deletion.
    Displaying Archived Vendor Master Data
    To display single documents for the archiving object FI_ACCPAYB using Archive Information System you require an information structure that has been created based on one of the following standard field catalogs provided by SAP:
    ●     SAP_FI_ACCPAY_1 (vendor master data FI)
    ●     SAP_FIACCPAY_2 (vendor master data SD)
    Each information structure must be active and filled.
    Edited by: Priyanka Paltanwale on Aug 21, 2008 9:09 AM

  • Org Level, fund center/cost center level restriction for tcodes????

    I am looking to see whether org level restriction and cost center/fund center level restriction is possible for certain set of transactions.
    I am using USOBX table for this analysis. This table has a check flag field ( same as in SU24) which says whether the Tcode (program) does the authority check for certain auth objects. Example- X (checked but not maintained in USOBT). This table pulls up several authorization objects under the 'X' category. However, when I do the System trace for the same tcode, all the objects (marked as X) are not captured. Instead only a few are captured.
    Can we rely on the USOBX data or should we do system Trace for every tcode. I am just pulling a report and not creating roles at this point. So trace is time consuming. But data reliability is equally important.
    My objective is to verify whether org level and cost center/fund center level restriction is possible or not for some tcodes.
    Do you have any suggestion to achieve this faster (through USOBX or any other means)?
    Thanks in advance
    Kee

    I would suggest you to check USOBX_C and USOBT_C instead of USOBX and USOBT as it will have your customization as well and not just the standard ones given by SAP.
    Also when check field is X ...it means the object is checked but not maintained for the t-code as you already said but I am not sure how much it will help you as the they will not be pulled by PFCG when you are creating the role until you change the object to Check / maintain . When you do that the check field will be Y and not X. So basically it is the Y one which you need to see.
    Going for trace is time consuming for every t-code and I am not sure if it really needed. When your roles are in testing phase and are tested by the functional team or the team which needs it and if they are missing some object, you can run a trace and find the missing object....
    I am not sure on what basis you want to change some field to Org level ...but typically it is done if you want to do segregation of roles based on these org level. There could be various other reasons and it is better to talk to your functional counterparts before changing a field to Org level.
    for ex : If you want to segregate on company code, you will create co. code as Org level and create roles for different company code.

  • Adjust manually changed Object field as per org level values

    HI,
    I have a role wherein a field maintained at org. level has been changes in object manually. hence it no more follows the the org. level values assigned.
    The requirement is "this object should get adjusted for its field to have values as per the org. level values" As I remember there is a SAP standard report that when executed for this role, will correct the object and we will be able to again have it's field values aligned with org. level values.
    I am not able to recollect or find the name of the report.
    Need help!!
    Thanks.
    ~ Pranali

    That this option is available in any authorization which is not copied from a standard one is still a mystery to me...
    I normally just check for them to see whether someone toasted the role and solve the root cause problem. Training is the hard way.
    Solution: Delete the authorization and open the role again to maintain the org. level.
    As this is in a development system generally, there are some pre-requisites though to be able to avoid it. Role admin is a very specialized task and everyone always wants more.
    Sandbox systems are cool places to mix the two of them and let people be creative with prototypes etc. Development systems also have feelings and enemies...
    Cheers,
    Julius

  • Question on org level values in derived roles

    I have a set of derived roles for a retail org.
    They have set the org level for the WERKS object to the store number i.e. 0012. in the  M_MSEG_LGO, M_MSEG_WMB,   and M_MSEG_WWE but set it to "" in the  M_MRES_WWA and M_MSEG_WWA. Needless to stay the "" is overiding the site restriction.
    My question is, how can they allow store to store transfers and goods issues for other sites but only do POs and goods receipts for their default store?
    If the transactions in the role are using the same object, it doesn't seem like it can be done but I am told it can! I can't figure it out. Can anyone assist?
    Thanks

    If you are talking about  straight authorization object ( then your design cannot go with derived role concept )
    If your controls are only through the organizational object  only then derived role design will help
    If its a mix of both standard object + organizational level object derived role will not help you.
    Please note
    the WERKS is the organization level  in your case the plan value is 0012
    do not set the values in parent role and also do not populate this value were its "$werks"
    what is TCODE you are using ?
    Edited by: Franklin Jayasim on Jul 21, 2010 11:45 PM

  • Why release strategies for PO at header level only

    We have release strategy for Purchase Requisitions and Purchasing documents like PO, Contract and SA.
    In case of PREQ we have a choose for either item level release or header level release, whereas in case of PO, Contract and SA only header level release is possible.
    My question is why SAP has provided only the header level Release Strategy for PO, Contract and SA? I wan to know the reason and logic behind this.

    Hi,
    For PR's, there is no header level data. Becuause vendor number is optional since it is internal document from the user dep. to pur org. That's why, vendor number fields is at item level in the source of supply screen. But this is optional field.
    That's why, you can release PR line items one by one or all at a time.
    If you are releasing all line items at a time, need header level release.
    If you release line item by line item, need item level release.
    But in the case PO/Contract/SA, these are final reference documents and sending to the vendor as external documents.
    That's vendor number is at header level field and line item in the PO are related to the single vendor.
    That's why u cann't release line item by item, i.e., item level release.
    You can relase all the  items in the PO or u can reject entire PO, not a single line item.
    That's why, only header level release is possible for the PO/Contract/SA.
    Regards
    KRK

  • Org Level Help

    I tried searching the threads and Google for an answer first - no luck.
    System: ECC 5.0
    Release 640
    The Org Level CO-OM Responsiblity Area is greyed out and I cannot edit it to enter a new Profit Center. When I select change mode I receive an error message which says "Authorization Object is invalid." Further information is "Table KBEROBJ does not contain authorization object.
    How do I resolve this? Do I need to create a new blank Object field in the table and run PFCG_ORGFIELD_CREATE for RESPAREA?
    I'm looking for a definitive answer and correction to this issue as I am flying in the dark.
    Thanks!
    Todd

    Here is how I fixed it - well tested in SBX that it works:
    Created a new entry in table KBEROBJ as follows:
    OBJECT: (EMPTY)
    CURRENT OBJECT: (KN)
    OBJ1: (KS)
    OBJ2: (HI)
    OBJ3: (PC)
    OBJ4 (PH)
    Next, I ran PFCG_ORGFIELD_CREATE for  RESPAREA. Then went into the role, change mode, Org Levels and I was able to change the value on the Profit Center Group tab as desired.
    So far so good - we'll test a little more in SBX before I make the change in DEV and transport it.
    Todd

  • How to create new org.level and further actions?

    Hi experts!
    I need help on the follwing situation.
    For better separation of industries for the marketing staff we do use the branch (e.g. food, energy, ...).
    For that we want to adjust the authorizations to branch specific.
    The questions are:
    1) Is it possible to create a new organisational level "branch"?
    2) If I have a new org.level I think I have to adjust existing authorization objects. Do I only have to extend the belonging auth.objects with the new org.level?
    3) What else do I have to do if a new org.level branch is created to check authorizations on that?
    Thanks for your help in advance.
    Regards,
    Alex

    If I read your question correctly I think you want to create a new authorization field. To get that to work you'd need to adapt a lot of software. Definately not a path to follow.
    All authorization cheecks need to hard-coded into the software. Changing SAP standard software is something one wants to stay away from as long as possible. It'll keep haunting you when patching, upgrading etcetera.
    If you want to 'upgrade' an existing field to become organizational a forum serach on PFCG_ORGFIELD_CREATE should give you pointers.

  • Release Strategy for more than 8 levels

    Hi experts,
    Can anybody have a clue how to get Release Strategy for more that 8 levels or anybody who have configured the same. Standart SAP supports 8 levels of Release Strategy. So How to enhance the standard feature with additional Levels.
    Thanks in Advance

    Hi Senthil,
    Thanks for the suggestion.
    You mean to say :
    That a purchasing document which has some 16 llevels of release strategy can be accomplished through :
    1. Release Strategy configured through 8 levels.
    2. A custom table needs to be created where based on one of the classification (Usrc01) feild of 1st Release Strategy should be mapped to another Usrc01 feild for some other Release Strategy2.
                                               OR
    2. Custom table have Release Strategy 1 name and another feild will have Release Strategy 2 lined to 1st Release Strategy.
    3. Based on FRGGR and FRGCO and ZTable should trigger next Release Strategy 2. But hou will this be displayed and what about Change History?
    Thanks that was an innovative idea but can u please elaborate.
    Thanks in advance.
    Ashutosh

  • Create material from reference material for all org.levels

    Hi,
    i want to create a material from a reference material with all MARA, MAKT, MARC, MBEW, MARD, MARM, MVKE, MLAN, MLGN and MLGT content for all organizational levels of the reference material.
    For instance, my reference material has 200 MARC entries. All these entries should also be created for the new material.
    Transaction MM01 will copy from reference but only for 1 organizational level. To create 200 plants manually with MM01 is not an option.
    I have to develop a copy from reference transaction, where i select the new material number, the reference material number and the required tables (MARA, MAKT, etc)
    I can read the current tablevalues and insert new entries into the required SAP standard tables, but that is not nice.
    Is there another option to do the job ?
    I know there are bapi's, but these are related to one org.level. For 200 plants, i have to execute 200 bapi to get the data from the reference material and another 200 bapi's to create the new material.
    with kind regards,
    Hans

    Hi Goutam,
    You can use the BAPI BAPI_MATERIAL_SAVEDATA, which will create/update the material. You can pass the reference material in the filed BAPI_MARA-PL_REF_MAT. And you can pass reference material for all view like this.

  • How to Inactive Item Status at Org Level

    How to Inactive Item Status at Org Level and what are the implications of doing so.
    What are the prerequisits before inactivating an item status.
    The Procedure I am following is
    Changing the Item Attribute control to Org Level for Item Status
    Log on to Organization Items and Selecting the Item Status as Inactive.
    Can any one please let me know what are the pre requisits before Inactivating an Items and The procedure I am following is correct.
    Thanks
    Srinivasa Garikipati

    Hi;
    Please check serial attribute and org attribute problems with item master and see its helpful
    Also you can check:
    http://oz1-n.blogspot.com/2009/06/interview-questions-for-oracle-11i-apps.html part
    1. Once an item is assigned to an organization, is it possible to remove this association at a later time?
    2. How do I inactivate an item?
    Regard
    Helios

  • New Org Level impact in existing roles

    Hi,
    I would like to set/create 2 fields as organizational levels. For example KLART and DOKAR. Checking these I realized there is a big amount of roles "affected" by this change.
    Because I plan to use the organizational level only for new roles , I would like to know which impact could have  this change for existing roles, should one modify the existing roles after creating the Org Levels ? or in contrast they still work as always an no changes / adjustments is needed?
    Thanks and regards
    FedeX

    Thanks Bernhard,
    I have a question
    As I mentioned before my goal is that the existing roles keep working after running that program... and do not want to perform any adaptation....only if there is a real error that avoid work correctly.
    In these 2 cases the role will keep working properly ( I mean restricting in the way that it uses to do).
    1) In case field is copied to the Orglevel area after running the program and the value(s) will stay in both places (OrgLevel and Original place)
    2)  In case field is NOT copied to the Orglevel area after running the program but the value still in the original place .
    right?
    Thanks
    FedeX

  • GRC 10: How to upload Org Level Rules in GRC 10?

    Hello Friends,
    we have implemented GRC 10 recently but missed to move org level rules from GRC 5.3 to 10. I don't see an option to load org rules in SPRO. Can you please let me know how can i load org rules from 5.3 to 10 with out disturbing the existing risks / functions? or is there an option to update tables directly for org rules?

    Hi Colleen Lee,
    Thank you for your response. Yes i see Master Data > Exception Access Rules > Organizational Rules and i am able to create org rules but i am trying to find an option to upload all at a time as we have around 50 org rules and have 2600 lines in it. creating manually will take so long and looking for alternate.
    Thanks & Regards 
    Pradeepthi

Maybe you are looking for