Granularity of  authorisation to specific customer numbers required in VA01

Hi SAP SECURITY community,
We need to be able to restrict a particular user to do the following.
1) In VA01, the user should have change, create, display rights when accessing a certain customer number,
2) But when accessing all other customer numbers, that same user should only have read rights.
I beleive this is possible through authorisation groups. Could any of you guys pls provide a step by step practical procedure of how we can accomplish both 1) and 2).
<removed_by_moderator>  Thanks a lot guys !!!
regards, Vikram
Edited by: Julius Bussche on Mar 11, 2008 4:31 PM

what are you calling authorization groups??? i'm not sure i can place that thing ...
anyway: not possible, we tried - look here´.

Similar Messages

  • Partner functions for a specific customer not seen in XD03 but appears in XD02

    Hello SAP Gurus,
    I have a situation where a partner functions for a specific customer not seen in XD03 but appears in XD02, In XD03 only one partner function (Ship to) appears but in XD02 (Sold to, Ship to, Bill to and payer appears), from the customer master I can see that account group for this customer has been changes to Sold to (Z001) from Ship to (Z002).
    I checked in settings for OB20 transaction for display customer centrally, it is in Display mode as required and not suprresed would like your inputs as to why this is happening and what can be done to fix this.
    Thanks and Regards
    Mohammed Roshan

    Hi ROshan,
      Open customer master in XD02  sales view and save it then check in XD03 it should display the partner functions.
    As you said the account group has been changed I think the records needs to be saved again.

  • Determine the customer numbers for which the installations

    Dear All,
    I configured VAR Service Desk on SolMan EhP1 + SPS 20, Everything is good, but I have a problem when run report AI_SC_GET_SAP_CUSTOMER_NUMBERS. It can determine my customer numbers, but have only my installation number in table V_AIINSNRS. There are no any installation number of my customers in table V_AIINSNRS .I need installation number of my customer are included in V_AIINSNRS. Please show me about that. Thank you very much!
    Thanks and Best Regards,
    Tru Hang

    Hello,
    This is the text from the SPRO activity help:
    1.3.9.3.3 Data Transfer from SAP
    Use
    You can copy the following system data from SAP into the System LandscapeMaintenance (SMSY):
    - Name,
    - System number,
    - Installation number
    - Product version.
    All data can be copied from SLD or RFC connection. This is an alternative for service providers who
    have no, or only restricted, connection to their customers via SLD or RFC.
    Requirements
    You have determined or maintained the customer numbers for the systems to be generated.
    Default Settings
    The system automatically generates IBase components, which you need for the Service Desk and Change
    Management scenarios. If you do not want IBase to be generated automatically:
    1. Choose the transaction DNO_CUST04.
    2. Deselect the field: IB_GEN_AUTO (description: Automatic IBase Generation).
    3. Save.
    Activities
    Set Automatic Generation flag
    You can:
    1. Generate all systems per customer number, or
    2. Generate systems per installation number
    Case 1: Flag/check whether all systems with a customer number are to be generated, and maintain the
    maintenance view V_AISAPCUSTNOS. In this case, the system ignores the flag at installation level.
    Case 2:If you select installations for which systems are to be generated, maintain the maintenance view
    V_AIINSNRS.
    Maintain Settings in SMSY_SETUP
    4. Choose: Edit -> Expert Settings.
    5. Enter the value A or N for the option Generate Systems by OSS:
    - A: Systems are only generated if a 3-digit alpha-numeric ID has been specified for the customer
    in maintenance view V_BP_SPC, to distinguish the long names of systems with different
    customer numbers, e.g. a system SOL for the customer SAP would be SOLSAP01.
    - N: New systems are numbered sequentially when they are generated. System SOL would be
    SOL00001.
    6. Save.
    Data is created by background job REFRESH_ADMIN_DATA_FROM_SUPPORT , which
    should be scheduled regularly. If you want to copy the data immediately, you can schedule it
    immediately . Check in the job log of transaction SM37 that it ran successfully.
    Note: The user under which the job runs must be in the table AISUSER , with authorization for
    system data maintenance in the SAP Support Portal.
    I hope this information helps.
    Best regards, 
    Miguel Ariñ

  • Multipe customer numbers under a single snc saprouter

    We have a concern regarding saprouter (snc type) and customer numbers.
    We are a consulting company providing application hosting for 3 of our customers running SAP systems. All of these systems are hosted in a data centre at our premises. Presently we have 3 separate saprouters for each customer and these 3 customers have separate SAP customer numbers.
    Inline with our server consolidations efforts, we are planning to merge these 3 snc saprouters into a single saprouter. While we understand that due to the generation of snc cert which is based on customer number, every saproute cert is unique to that particular customer, are there any work arounds for this? Have there been any solutions for other companies having the same issue i.e. having multiple customers in the same data centre and sharing saprouter?
    Please advise the best solution forward to consolidate saprouters.

    Hi Stephen,
    Question: Can the SAProuter be on the internal network with a private IP address but accessed by via the Public address of our firewall and proxied through?
    yes, no problem, just a port forwarding for this one port 3299 for insite and NAT for outsite is required!
    Question: Must all these ports be opened? Elsewhere Volker has stated only one port is required to be opened through the firewall.
    ONLY port 3299 - I did several setups this way )
    Question: Exactly how secure is this connection? What measures have others taken to protect the connection.
    As save as a 128 Bit certificate is - by now I didn't hear on breaking that => it is safe with state of the art )
    (I would imagine VPN is 128 Bit "only" as well)
    => really go for that ....
    Regards
    Volker Gueldenpfennig, consolut.gmbh
    http://www.consolut.de - http://www.4soi.de - http://www.easymarketplace.de

  • Query to skip special customer numbers while auto generation

    Hi
    I have a customer number maintenance screen refering table STTMS_CUSTOMER_SRNO_BANK, where customer number is auto generated.
    Table:STTMS_CUSTOMER_SRNO_BANK columns are
    CUSTOMER_RUNNING_NO , USED_FLAG
    Present queries are:
    SELECT MIN(customer_running_no)
    INTO l_no
    FROM sttms_customer_srno_bank
    WHERE used_flag = 'N';
    SELECT customer_running_no
    INTO l_running_no
    FROM sttms_customer_srno_bank
    WHERE used_flag = 'N' AND customer_running_no = l_no
    FOR UPDATE NOWAIT;
    Current logic is it takes MIN(customer_running_no) and USED_FLAG is 'N'.
    Now an enhancement is to be added that a new table CSTM_CUST_CATEGORY where a range of numbers is reserved for a special classification of customers.
    Table:CSTM_CUST_CATEGORY
    CUST_CATEGORY START_RANGE END_RANGE
    ROYAL      1     100000
    VIP 150000 200000
    I need to write a query to auto generate customer numbers and the auto generated numbers should not fall in the special customer category like ROYAL,VIP,ie it should not be in the range 1-100000 and 150000-200000.
    Please help me to write this query.
    Thank you
    Mary

    Thanks a lot
    This query works and serves half my requirement.
    Ex..i have customer_running_no from 1300 to 1350 where used flag set to 'N'
    and the start_range and end_range I have given is 1300 to 1500.
    Now this query skips 1300 to 1350.It gives 1351.But my actual requirement is it should give 1501 as the next customer_running number.May I know what modification should i do to this query to get this expected result.

  • SEND_SYSTEM_RELATIONSHIP_TO_SUPP job fails with "No customer numbers ..."

    While executing SOLMAN_CONNECT tcode, I get the error
    SEND_SYSTEM_RELATIONSHIP_TO_SUPP job fails with "No customer numbers in transaction AISUSER".
    SAP note
    Note 1351731 - Termination SEND_SYSTEM_RELATIONSHIP_TO_SUPP/SOLMAN_CONNECT
    says problem fixed against ST 400 with SP SAPKITL431.
    I'm running NW 7.0 SPS 15 which has ST 400 SAPKITL425.
    I need to get SAPKITL431. but when I search SWDC for this package, I can only find SAPKITL430. I need to get SAPKITL431 in the download basket and have someone at SAP to turn off the MOPZ requirement so I can use DLManager to get the SP dlownloaded and installed. Are there other dependent SPs required. Or am I better off downloading SPS 16 or later.
    I need the MOPZ requirement turned off for this until I can get the fix and get MOPZ up and running.

    Hi Andreas,
    AISUSER was unchanged, which contained the S-user # for user DDIC and myself.
    I went thru the steps in note 1140822, eventhough I had turned off BAdI months ago when I was setting up the RFCs for SAP-OSS. I maintain just one S-User. Therefore followed option 2 in the note.
    Trying to implement snote 114822.
    An exception with the type CX_SY_OPEN_SQL_DB occurred, but was neither handled locally, nor declared in a RAISING clause
    Exception of class CX_SY_NO_HANDLER
    An exception of type 'CX_SY_OPEN_SQL_DB' occurred, that was not caught anywhere in the call hierarchy. It was not handled locally or  declared using a RAISING clause.
    TC SE19 shows AI_SDK_SP_RFC_RP as active.
    Selected New BAdI and Display.
    Re-executed note 1140822 and it worked this time. Apparently, the display of AI_SDK_SP_RFC_RP activated this implementation.
    Snote 1140822 completed. I set process status to completed.
    I reran MOPZ under tc solution_manager. I now get a different error. ERROR: E:/TMWFLOW/MO_BACKEND:025.
    I forced a run immediately on SEND_SYSTEM_RELATIONSHIP_TO_SUPPORT, whcih ran successfully NOW. 
    Now MOPZ runs fine and I can see my files to download. I did not have any logical systems to select, but MOPZ did pickup some patches anyway. Not sure why no logical systems at this point. I defined a few logicals for both SM and satellite systems. I'll address this issue separately and open new thread, if need be. 
    The one question that remains is using SE19 to display status of AI_SDK_SP_RFC_RP appears to of activated it. Is this right? It fixed something such that now the applying the snote worked in de-activating it.
    Thanks for all your help.
    -Don Isler - HP SAP CC.
    P.S. Is there a way I can upload or email you a word doc that has my screen shots and details of what I tried?
    Edited by: Don Isler on Jul 29, 2009 1:36 PM

  • Year Specific Batch Numbers in SAP

    Hi All
    Can we have year specific batch numbers in SAP. I would like to define internal batch numbers year wise.
    Every year this numbers have to be reset.
    Pls help in finding a solution.

    use customer exits for batches:
    http://help.sap.com/saphelp_40b/helpdata/en/dc/1d4b6e5733d1118b3f0060b03ca329/content.htm
    yogesh

  • About MD81 customer individual requirements ?

    Hi Gurus,
    can anybody Explain How To maintain CIR in MD81 . i want to maintain CIR in MD81 but not able to understand it properly. after entering material and plant there are different errors coming. please help me to understand CIR .
    .is it possible to maintain CIR with specific customer no ?
    Thanks&regards,
    Venkat.

    Hello Venkat,
    We cannot help until we know the 'different errors'.
    Regarding the second query, the answer should be 'No' because CIR stands for customer independent requirements.
    Best Regards,
    Rajen

  • Restrict creation of sales order for specific customer

    Hello All,
    I want to restrict creation of sales order (of particular sales order type) for specific customer, please let me know how can I do it.
    Your early reply will be highly appreciated.
    Thanks & Regards,
    Mahavir

    HI
    As per My knowledge it is not possible in Standard SAP , you need to go with Enhancement
    Go to SE38 : MV45AFZB, User Exit: USEREXIT_CHECK_VBAK
    Regards,
    Prasanna

  • Business partner creation - Not in sync with customer numbers -

    Hi All
    I am trying to do the BP conversion in collections management.
    The customer number range for account group ZXXX  is (80000 to 89999) and the external number range flag is not selected.
    I have created created a number range Y2 through BUCF, with numbers from (80000 to 89999), I did not choose external flag, thinking it should be same as customer number range. I have created a BP group ZXXX and assigned this number range Y2.
    Later when I did the BP conversion through MDS_LOAD_COCKPIT, I observed that the BPs are not in sync with the customer numbers.
    So my question, should I have choosen external number range flag in BUCF, even though its not selected in the customer number range? Has this caused the issue?
    Please help me understand this and rectify this issue.
    thanks in advance.
    Krishna

    Hi Christobal,
    Thank you so much for you response. 
    As suggested, I have checked BP number range as external. Later when I ran MDS_LOAD_COCKPIT, I get the below messages
    Grouping ZXXX has external number assignment, enter a number
    Partner data processed with key PartnerGUID 4E1BD7375F080AE0E10080000A5B030E
    Grouping ZXXX has external number assignment, enter a number
    So is there any other setting which I might be missing?
    Please advise.
    Thanks
    Krishna

  • Transaction code for creation of a specific customizing table ?

    Hi,
    What's the transaction code for creation of a specific customizing table ?
    Thanks in advance.

    Carl,
    if you can share with us from which t-code you achieve this , than it would be better for we guys.
    Amit.

  • Activities in Finance that involves moving of customer numbers

    Hi,
    I would like to know what are the activities in SAP that are involved with transferring of customers numbers ?
    We are having some business shifts that we are renumbering our customer numbers from non-standard numbering to a standard numbering range of XX-series. Apart from AR balance transfer what else should be taken care of from finance ?

    Hi bmjunar,
    Here are some general links that might be helpful as you try to use Softmotion and SolidWorks:
    http://zone.ni.com/devzone/cda/tut/p/id/9566
    http://www.ni.com/virtualprototyping/training.htm
    Best Regards,
    Michael B.
    Applications Engineer

  • Customized cash requirement report

    Hi All;
    I am running the customized cash requirement report in account payable module and it is completing with  error: REP-0069: Internal error any idea how i resolve this issue.
    Thanks,
    Regards

    hello
    u can find the answer in "oracle cash management user guide".
    for R12 u can find the document here: http://download.oracle.com/docs/cd/B34956_01/current/html/docset.html
    bests

  • Populate pdf form after user enters specific customer id

    I am brand new to this and need to know the best way to populate certain fields on a pdf form. I have made the database connection and it works correctly. I want the user to enter a specific customer id. ( I already have the sql code for the select). When the user hits enter, I want other fields to be populated with address, etc. I am not using any kind of drop down box. Please help me with this.

    Try the Developers/SDK forum...
    This forum is for questions about the PDF Language itself.
    Leonard

  • I am purchasing a apple iphone 4 16 gb - model no. MC318LL, version 5.1.1 (9B206) CAN ANYBODY TELL THAT HOW OLD THE PHONE IS AND WHERE TO CHECK THAT IF I AM PURCHASING A RIGHT MODEL. SPECIFICATIONS CHECK ALSO REQUIRED

    I am purchasing a apple iphone 4 16 gb from a local second hand seller - model no. MC318LL, version 5.1.1 (9B206) CAN ANYBODY TELL THAT HOW OLD THE PHONE IS AND WHERE TO CHECK THAT IF I AM PURCHASING A RIGHT MODEL. SPECIFICATIONS CHECK ALSO REQUIRED - its looks are like a new phone.

    http://www.gazelle.com/how-to/iphone/model-identification
    Turn off your Caps Lock - all caps is considered shouting and rude.
    Many will not read your post if suject/body is in caps.

Maybe you are looking for

  • ISSUE in cancelling of MRKO settelment

    Hi Friends, I am NOT able reverse the consignment settlement (MRKO) and I have follow the following steps: 1. Goods Receipt (GR) is made 2. Goods issue (GI) is done 3. MRKO is done with reference to material document (GI) 4. While trying to cancellat

  • Multiple lines for same app on daily trend report?

    Hey All, This is my first app and my first time reading the reports so pardon me if I am confused. I noticed that there are several lines (about 20) on my trend report all for the same App. From reading about the trend reports it seemed like each app

  • 27inch iMac plate to raise it level with a 27inch Thunderbolt LED Display?

    Hi, I'm in the market for a new 27inch iMac and a 27inch Thunderbolt LED display as a second monitor. Looking that the specs I note that the height of the iMac is 16mm less than that of the LED display. That being said, I'm not keen to put something

  • Does iMac 2009 A1224 support DDR3 1333MHz Ram or not?

    Hi, I got lucky and came across a free set of 4GB 2Rx8 PC3-10600S-09-11-F3 Ram. My question is, if an iMac model A1224 supports 1333MHz or not? Any help greatly appreciated Cheers

  • Unable to create partition for solaris 10

    I have windows 7 installed in my vaio, and want to install solaris 10. I have 190 gb of space. Which I divided as 1. 40 gb for windows 2. 65 gb 3. 65 gb 4. 20 gb unallocated I want to install Solaris in unallocated space. when I try to install solari