HCM Security - Cost Center

Hello All,
Since we are providing some HR master data accss to Finance users, we would like to restrict the access based on Cost Centers. We would like to create roles and assign to finance users who will then be able to access data of employees who belong to a certain Cost Center. We have already configured Org Key and it does not have Cost Center (this can not be changed).
Is there any other standard way of including Cost Centers as authorizaton without using Org Key in P_ORGIN?
Thanks,
Nakul

Saku,
I went through the SAP Help pages and it does look like a good solution. I will give it a shot in our sandbox today and see if it works for us. I will update this thread again soon.
I do see however that there is a standard report to be run after the custom auth object is implemented. Have you had any issues running these reports; any collateral damage chances?
We do use al the standard HCM auth objects currently, and they will continue to work... this modification wont affect that, correct? I will go through this myself this week, but wanted to check with you since you have implemented this often.
Thanks a lot for your time and advice
Thanks,
Nakul

Similar Messages

Cost Center Security

HI,
We have a security requirement on one the G/L plan to actual BEX report for Cost center. the report has cost center hierarchy. but the 3 levels we need security are:
1) managers that can access all cost centers
2) managers that can access a range of cost centers
3) managers that can access one cost center
we have updated 0COSTCENTER as authorizations relevant, but it works for 1 & 3 from above but not for 2. we have changed the authorization relevant to hierarchy, selection, interval and it seems like the range doesnt work.
Any help would be appreciated.
thanks,

In rsecadmin you added the hierarchy to your object and the analysis authorization is in your role(check transaction PFCG)?
Maybe you added the hierarchy, but has the user somewhere else full authorization.
Please let me know.
Kind regards,
Benno Mateman

Authorization: data level security by cost center to finance line items

We have a business unit request requiring implementation of cost center data level security through FI transaction codes for financial line items. Example requirement: Cost center manager can execute FS10N GL account line item display, drill into the balance and only return those line items to which the cost center manager has access. Cost center managers currently report their cost center expenses via cost center accounting report and through those reports are able to drill into the FI line items to display document and line item details. Cost Center managers, due to their varied responsibilities, also have access to tcode FS10N, from which if they execute reports directly, can access data for cost centers which they are not responsible for.
Our security team has stated that the determination of authorization objects which are checked at transaction code/program execution are not configurable. We’ve found when debugging that it would be possible to implement user exits for additional authorization checks, but that in order for the authorization check to actually get called, the object must be set as ‘checked’ within SU22/SU24.
Has anyone had a request to implement such cost center data level security for financial line items through Financial transaction codes? If so, what steps were taken to be implemented? Was this able to be accomplished via security configuration and PFCG security role updates or was custom code logic needed? If custom logic was needed, to what extent was this implemented (what tcodes/programs were included; how was the decision of what to include and exclude determined). What was the duration of this effort?
Has anyone had a request to implement such cost center data level security request for financial line items via Financial transaction codes and not implemented the request? How was this communicated to the business that the request for data level security goes against SAP’s authorization design?
Thank you in advance for your input,
Becky Zick

Hi Becky
Have you tried with object K_REPO_CCA? You have available these fields to filter authorizations.
I hope this helps you
Regards
Eduardo

Cost Center Security Issue

hi gurus
i have a situation in which i have like 60 plus users every one has authorization to different set of Cost centers. now how can i accopmlish that.
secondly suppose they run a report with a Cost Center Hierarchy with lots of cost centers at different levels, some they have access to some they dont, now what will happen ?
- will they be able to see only the cost centers in the hierarchy they have access too.
- or will they not be able to run the report at all because they dont have access to some of the cost centers.
- or they will be able to access soem nodes but no the ones that have atleast one CC that they are not authorized for.
by the way i am working on BI-7, the latest version of BW
thanks

Yu dont have any other better option other than maintaining authorization values for the users for their respective cost centres.
In BI 7, you need to create authorization objects in RSECADMIN and maintain values. There will be heavy maintenance efforts.
Ravi Thothadri

Security on Cost Center

hi gurus
i have a situation in which i have like 60 plus users every one has authorization to different set of Cost centers. now how can i accopmlish that.
secondly suppose they run a report with a Cost Center Hierarchy with lots of cost centers at different levels, some they have access to some they dont, now what will happen ?
- will they be able to see only the cost centers in the hierarchy they have access too.
- or will they not be able to run the report at all because they dont have access to some of the cost centers.
- or they will be able to access soem nodes but no the ones that have atleast one CC that they are not authorized for.
by the way i am working on BI-7, the latest version of BW
thanks

Hi Adnan,
the answers to your questions depend on the concrete report you are talking about and how detailed authority-checks have been implemented by the responsible developer.
You can do one of the following things to find out what is checked yourself:
1. codescan
2. debug the execution of the report having set a breakpoint on the command AUTHORITY-CHECK
3. do a system trace (transaction ST01) with trace component "Authorization Check" and run the report
Hope this helps to find out whether your authorization concept also works for this report.
Regards,
Claudia

BW Analysis authorization issue on cost center range

Hello BIW security experts
I have a problem where I created an analysis authorization on a cost center range and it looks like the interval is not working. The report is just a list of cost centers (demo to users to prove that analysis authorizations work in order to skip 2 managerial cost centers.
. Cost centers are numeric. Example: 2000100. In the drop down list they appear as such.
. I want to have the following cost center range: 1000000 to 1000771, 1000773 to 2000771, 2000773 to 9999999.
Thereofore 1000772 and 2000772 should not appear in the list.
. In the analysis authorization I have put the 3 ranges above on 3 separate lines. 'BT' is the operator. The cost centers have been selected from the drop down list.
Results: I get only 1 record from the report.... 2000772. (which is one I want to exclude..
Steps tried to debug:
. When I put a list of cost centers in the analysis authorization on separate line with the 'EQ' operator, then the report works.
. I tried putting ' ' delimiters since cost center is a char field but it fails.
. I tried adding leading and trailing zeros to fill up the char(10) but no luck.
. I tried creating a hierarchy with the interval and put it in the hierachy auth. tab and it does not work either. It gives the same number of records than the first step.
. A hierarchy with single values work.
I do not know what else to try..
Thanks.
YB.

Good morning
Here it is from RSECVAL
ZCC_TEST     0COSTCENTER                    I       BT        1000000                                                      1000771
ZCC_TEST     0COSTCENTER                    I       BT        1000773                                                      2000771
ZCC_TEST     0COSTCENTER                    I       BT        2000773                                                      9999999
ZCC_TEST     0COSTCENTER                    I       EQ        #
ZCC_TEST     0COSTCENTER                    I       EQ        :
ZCC_TEST     0INFOPROV                         I       CP        *
ZCC_TEST     0TCAACTVT                        I       EQ        03
ZCC_TEST     0TCAIPROV                         I       CP        *
ZCC_TEST     0TCAKYFNM                       I       CP        *
Thank you for your help.

Cost Center Inheritance from Org Unit

Good day all,
Can someone please advise regarding cost center inheritance from org units?
I understand the inheritance concept, however simple need to know if the CCenter is added to the org unit via A011 relationship, does the system physically create a A011 relationship on the position inhertiting the cost center from the org or does the system simply pick up the realtionship from the org unit relationsip for use in IT0001 field KOSTL (cost center)?
Thanks guys, have a lovely day!
Christy

Hi Christy,
As we know cost centre(K) is an unusual object in OM.Two type of objects internal whose master record are in database table beloging to sap erp hcm and eexternal object whose master data belong to other application areas.Cost centre is an external object that is used to represent origin of costs.Inheritance concept is on the basis of whoch cost centre are assigned in org plan.
directly related cost centre is called master cost centre and they are made via A011 cost centre assignment relationsip.they can be made at org unit,position or work centre and nornmally its org unit that common.Org unit at the top are asisgned the cost centre as a best practise so that all the org units below or reporting will inherit the same.
Similarly multiple cost centre assignments can also e made through 1018 infotype(cost centre distribution).Inheritance also applied to them aswell.
Hope this helps.
No Worries
KG

How to design and develop Cost center with SAP BPC 5.1 ?

Hi all,
Can any one tell me how to design and develop cost center planning (what are the steps to follow) using SAP BPC 5.1?
Thanks,
Sandy

Hi Sandeep,
1:We need to look at whether cost center planning is tied to a profit center level and/or to a company code level
2:We could have dimensions like Account(which in this case would reflect cost element),category,entity,time with additional dimension s like profit center(cost centers can have a direct mapping to profit center,usage of properties would help in here),WBS ,projects,investment position id's etc.
3:We could look at different applications like HR(pay roll related expenses),admin,capex(to bring in depreciation values) etc to bring in data to pull in data to different cost centers either directly or via script logic(usage of destination_app)
4:For those values not tied up to profit centers ,we would look at allocating/distributing the expenses to different cost elements
5:We need to decide whether we do the planning on a monthly/periodic vs yearly level where in we would look at actual values and incrementing at a certain % to fill in as the base for our planning(using category=actual/plan plus timeperiods).We could look at Top down vs botton up approach as well to segregate the planned costs
6:Consideration should be made at security level to identify/restrict different users who needs to access specific cost centers
Yes,this is just a small jist of structure,there are 100's of other considerations which would come into picture from a business requirement level.
regards
shyam

Cost Center on HRMS

Hi All ....
I need to know what is the diffrence between three types of cost center on HRMS element link screen:
1. Fixed Cost
2. Distributed cost.
3. Normal Cost.
How I can determine a flexfied qualifier when i define the cost center FF.
Regards;

I need to know what is the diffrence between three types of cost center on HRMS element link screen:
1. Fixed CostWhen you want to cost the element only to one account, the account you specify in element link then you use Fixed Cost. Mostly this is used for deductions.
2. Distributed cost.When you want the Cost of some elements to be distributed over your earnings like say you want to cost medicare or social security paid by employer back to the cost center to which earnings are costed.
3. Normal Cost.This is used when each element entered for employee has different costing. this is generally used for regular hours worked by an employee.
>
How I can determine a flexfied qualifier when i define the cost center FF.Qualifiers tells u that which segments you want to define for Costing level. As you can define costing a five levels, payroll, organization, link, assignment and entries, you define at the KFF which segments you want to see at each level

How to set master cost center to required input in the maintaining position

Dear experts,
I have two questions in the HCM module,could you please tell me?
Issue 1: How to set the column of master cost center to required input in the maintaining position screen?
Issue 2: some of position has two cost center, i have maintained two cost center(cost center 1:90%,cost center 2:10%) percentage in the tab of cost distribution with trasaction code ppome.when i post to accounting,it only post to master cost center 100%,it can not distribute two cost center, Could you please tell me the reason?
Looking forward to your reply.
Best regards,
Merry

HI,
Plz check with ur FICO Consultants as master Cost Center r desgined by them
They will Loop group of Cost Centers to Master Cost Center.
This concept has started in ECC 6.0 Version
Regards,
Kiran

Change of Cost center validation date

Hi
HCM consultant required cost centre validity date w.e.f 01.01.1970 because he told he is facing problem at the time of creation of Position and position assigned to personal number.
My controlling area and version validity start from 1970 but I have created cost centres/profit centres w.e.f 01.1.2010 to 31.12.9999 in production server, I can not delete profit centre, cost centres because transactional data is there.
How I can change profit centre, cost centre validity date.
regards
imdad

If you need to extend the CC master data use KSO1.
Create Cost center with 01/01/1970 to 12/31/2009. Also extend the validity date of profit center assigned to cost center before extending cost center.
Regards,
Mohan

HRP1001 subtype A011....Position to Cost center data

Hi Folks,
I am new to HR data replication from HCM to ECC. I am trying to replicate the HR Organizational data from HCM to ECC, THough I am able to replicate all the organizational data I am having issue with HRP1001 Subtype: A011 (Position to Cost Center data). I am using the IDOC type HRMD_ABA and I see all the IDOCS successfully made it to ECC with status 3; but still when I look into HRP1001 (plan version 01, Object TYpe :S; subtype:A011) I see zero entries. As there are no failed IDOCs it is difficult to understand what is stopping the entries to be populated. Please advise if any one has any suggestions or if anyone has encountered similar issue.

Kalyan,
Shouldn't the object type be S. Anyway I even tried with O but still no luck.
But I observed one thing, there are no entries in HRMDORIGIN and when I tried to run the program RHALEHRMDORIGINIT, I am getting a dump
Category               ABAP Programming Error
Runtime Errors         SYSTEM_LOAD_OF_PROGRAM_FAILED
ABAP Program           RHALEHRMDORIGINIT
Short text
    Illegal interruption of the event LOAD-OF-PROGRAM.
What happened?
    Error in the ABAP Application Program
    The current ABAP program "RHALEHRMDORIGINIT" had to be terminated because it
     has
    come across a statement that unfortunately cannot be executed.
Error analysis
    During the flow of the event LOAD-OF-PROGRAM (event for the
    initialization of an ABAP program), a condition occurred under which
    the event was to be left early. This is not permitted as it would
    result in an inconsistent status in the ABAP program.
Trigger Location of Runtime Error
    Program                                 RHALEHRMDORIGINIT
    Module Name                             SYSTEM-EXIT
Active Calls/Events
No.   Ty.          Program                             Include                             Line
      Name
    1 EVENT        RHALEHRMDORIGINIT                   ???                                     0
      SYSTEM-EXIT

Cost Center -- Automatic Cost Allocation

Hi at all,
1. We receive a monthly invoice for electricity etc.
2. We put the hole amount in one Cost Center.
3. At the end we allocate the amount manually to each relevant Cost Center/Department.
From A $100.000
To S $50.000
To T $40.000
To Z $10.000
To ...
Is there a way to automate this?
It can be really annoying.
Markus

Hi Markus,
If i understand you correctly,you will book energy cost to one cost center and end of the month you will allocate to other cost centers.
two ways you can allocate costs in.
1. Assessment
2. Distribution
Assessment:
Assessment is an activity that you perform periodically, during the period-end closing in Overhead Cost Controlling (CO-OM), in which primary and secondary overhead costs are assessed from one or more sender objects to one or more receiver objects.
Assessment means that the sending cost center is credited and the receiving cost center is charged under a freely definable secondary cost element. The original cost elements that were charged by the sender cost center are lost, and are converted to one or more assessment cost elements (secondary cost elements).
Assessment groups together the posted primary and secondary costs and allocates them to the receiving cost center(s) in an assessment cost element. The cost centers for assessment are the quality lab, IT, cafeteria, housekeeping and plant security.
For example, you could assess the cost from the Reception cost center to the other cost centers based on the headcount managed in those cost centers.
T.code : KSU1,KSU2 and KSU3,
To Execute :KSU5
Distribution:
Distribution is an activity that you perform periodically, during the period-end closing in Overhead Cost Controlling (CO-OM), in which primary overhead costs are distributed from one or more sender objects to one or more receiver objects.
Many documents in Financial Accounting involve overhead costs. A clear allocation to one or more cost centers is not possible, or only with a major effort. You can use the allocation cost centers and internal orders as auxiliary constructs in such cases. During distribution, these costs are allocated (distributed) from their allocation cost centers to the actual receivers according to freely definable rules. The sender cost center is credited, and the receiving cost center charged, under the original cost element. In contrast to periodic reposting, however, the accounting information is lost in the process.
T.code : KSV1,KSV2 and KSV3
To Execute :KSV5
if you want to allocate costs by head count or fixed percentage etc.when your creating cycles you can choose these options.
Thanks,
Rau

Creation & Assignment of Cost Center?

Hello Experts,
I have done all the configuration in SAP HCM but I don't have any knowledge about Cost center.
So please guide me how to create Cost Center? and with whom it should be assigned?
Because at the time of hiring employee cost center is required in IT0001.
Regards
Rohit

Hi Rohit,
Create cost center via KS01.
Assigning cost center to org unit or position is your company's decision.
We are assigning cost centers to positions since our org units and cost centers are not totally in -line.
Regards,
Dilek

Cost Center. Position or Org Unit

Hello Every One,
I am learning SAP HCM. Forgive me for this basic questions:
When we create an org structure, are we supposed to assign the cost center to a position or do we do it for an organizational unit? What are the advantages/dis advantages of doing this?
Thanks
Marian Roza

Hello Everyone,
Thanks for the replies. So when we assign the cost center to an org unit, does it imply that all costs for the positions assigned to the org unit would also be captured by the cost center. what is the standard business practice for deciding to go about it ?
Thanks
Marian
Edited by: marian roza on Jan 14, 2008 12:25 PM

HCM Security - Cost Center

Similar Messages

Maybe you are looking for