How to Restrict Intercompany Access By Company Code

We have multiple territories, of which each is assigned their own company code  We'd like intercompany access to be restricted by company code so users only have intercompany access to only territories they have authorization for.   Currently, we have role X setup and authorized users have access to this role.
Intercompany TCODES would include FBU2, FBU3, and FBU4. 
The obvious solution would be to create additional roles via PFCG whereby each role has access to X company codes and assign these users to the appropriate role.  Any other ideas?  Also, with the ECC upgrade, doesn't this impact performance on the cube when trying to restrict roles by company code?
Thanks in advance!
Edited by: david kim on Feb 10, 2009 2:13 AM

Hi david kim,
Based on my experience, the best way is by maintaining the roles in Txn PFCG as what u did just now. FYI, there's no impact on performance on the cube when trying to restrict roles by company code. (we have faced it before when upgrading 4.6C to ECC6...with flying colors ...).
Hope this will solve your problem.
TQ
Regards,
Nazrul

Similar Messages

  • How to restrict  sale offices under company code

    Hi guru's
    I want to see all the sales offices under the company code, like comapny code br11 and sales office is br01, if i select comapny( user entry) it will display all the invetory information then in the filter if i slect saleas office it should display all the sales offices(br01,br02...)  which r under( br11).
    del
    ( assign points if helpful)

    Hi,
    I think you are in Bex queries.
    In Query Designer you can restrict Company code with Sale soffices.
    Just try it.
    Place the onject in Filters and right click and select restict.
    Hope this helsp...
    Let us know status.....if you still any issues.
    Reg
    Pra

  • How to restrict the access of FUNCTION MODULE for others after transporting

    A Function module needs to be executed in one server and should be executed when others try to access it.how to restrict the access of FM to one application server after being transported using SM59.

    issue resolved

  • How to configure Funds Transfers, Cross Company Code Vendor Payments, Bill

    Hi All,
    Can any one help me, How to configure Funds Transfers, Cross Company Code Vendor Payments, Bill of Exchnage Payments with Automatic Payment Program?
    Regards
    Chandra

    Hi Chandra,
    This is what you need to do to configure <b>Cross Company Code Vendor Payments</b>.
    Execute transaction code <b>OBYA</b>, when prompted, type in 1st coy code, say A and then 2nd coy code, say B. This would take you to the "<b>Maintain FI Configuration: Automatic Posting - Clearing Accounts</b>" screen.
    In the first frame, where you have
    Posted in : A
    Cleared Against : B
    Under Receivable
    Debit Posting Key : <b>01</b>
    Account Debit : Account Number (The account can be a G/L account, a customer account or a vendor account)
    Under Payable
    Credit Posting Key : <b>31</b>
    Account Credit : Account Number (The account can be a G/L account, a customer account or a vendor account).
    In the second Frame
    Posted in : B
    Cleared Against : A
    Under Receivable
    Debit Posting Key : <b>01</b>
    Account Debit : Account Number (The account can be a G/L account, a customer account or a vendor account)
    Under Payable
    Credit Posting Key : <b>31</b>
    Account Credit : Account Number (The account can be a G/L account, a customer account or a vendor account).
    So, if you are using the <b>Customer/Vendor</b> approach, company A must be set up as both a Customer(Use Txn Code <b>XD01</b>) and a Vendor(USe Txn Code <b>XK01</b>) in Company B and vice versa.
    Once you have completed this set-up, you can then use transaction <b>F.13</b> and/or <b>F13E</b> to carry out your automatic clearing. Alternatively, whenever Payment Run is executed via transaction code <b>F110</b>, this would automatically clear out the payables and receivables in each company code.
    However, if you intend to use the G/L approach, then the account numbers would be Inter-coy G/L account for each coy code as defined in the chart of accounts.
    I hope the above helps.
    Do not forget to award the points please.
    Regards,
    Jacob

  • How to restrict user access in Oracle Application Server 10g (9.0.4)?

    Can anybody please let me know how to restrict user access in 10g AS? To be specific, how to allow http requests from specific IPs only?

    Hi,
    You have to edit httpd.conf and modify acces rights for each protected directory
    e.g.
    <Directory /var/www/sub/payroll/>
    Order allow,deny
    Allow from 192.168.1.0/24
    </Directory>
    then you have to restart Oracle HTTP Server
    jm--

  • How can I pull the BUKRS (company code) value, for a X_USER (sy-uname) inpu

    HI Experts,
    Pls. clarify that, How can I pull the BUKRS (company code) value, for a X_USER (sy-uname) as input?
    ThanQ.

    Check with USRM1 Table
    give user name (Uname ) and you get company code (BUKRS)
    also check with other tables : USRM* in SE11
    Thanks
    Seshu

  • How to restrict AS02 access to certain fields only

    How to restrict AS02 (Asset Master Record) access to certain fields only. Currently when you assigned AS02 to a certain user, this will enable the user to change all the fields in the asset master record. Suppose i want only the user to restrict the access to certain field eg.NDJAR (Life in Yrs).
    Thanks for your inputs.
    Regards,
    Robert

    hello,
    basis has to assign the proper activity with object A_S_ANLKL. in this case they have to allow activity 03 only with combination of Cocode,asset class. see some more details below.
    This authorization object is the first part of the object "asset master record."
    The definition at this level determines whether the user is authorized to process data in a given company code. The activity type for the transaction is also defined here. This authorization object is used for master data transactions, for the display of value fields, and for reporting.
    Defined Fields
    The following fields are assigned to the authorization object
    Asset class (specified by entering a value in the pop-up window)
    Company code (specified by entering a value in the pop-up window)
    Activity type - there are three different activity types:
    01 = Create
    02 = Change (including blocking and deleting)
    03 = Display

  • Passcode has been change, how can I now access and reset code without losing everything!

    Unable to get into settings,  code was change, how to access and reset code without losing apt's? Is the only way is to completely erase and start new?

    Sorry, but you cannot. If you have a current backup in iTunes then you can restore it.
    Locked Out, Forgot Lock or Restrictions Passcode, or Need to Restore Your Device: Several Alternative Solutions
    A
    1. iOS- Forgotten passcode or device disabled after entering wrong passcode
    2. iPhone, iPad, iPod touch: Wrong passcode results in red disabled screen
    3. Restoring iPod touch after forgotten passcode
    4. What to Do If You've Forgotten Your iPhone's Passcode
    5. iOS- Understanding passcodes
    6. iTunes 10 for Mac- Update and restore software on iPod, iPhone, or iPad
    7. iOS - Unable to update or restore
    Forgotten Restrictions Passcode Help
                iPad,iPod,iPod Touch Recovery Mode
    You will need to restore your device as New to remove a Restrictions passcode. Go through the normal process to restore your device, but when you see the options to restore as New or from a backup, be sure to choose New.
    You can restore from a backup if you have one from BEFORE you set the restrictions passcode.
    Also, see iTunes- Restoring iOS software.

  • How to create request for extracting company code

    Hi All,
    Can any body guide me how to create a request for extraction of company code 0COMP_CODE_ATTR.
    Actually i have created a request using transport conneciton but while moving this request to quality system i am getting following error.
    DataSource 0COMP_CODE_TEXT does not exist in source system QLTCLNT440 of version A
    Mapping between data source 0COMP_CODE_TEXT and source system QLTCLNT440 is inconsistent
    DataSource 0COMP_CODE_TEXT does not exist in source system QLTCLNT440 of version A
    Field KEY1 will not be delivered from DataSource 0COMP_CODE_TEXT in source system QLTCLNT440
    Field TXTMD will not be delivered from DataSource 0COMP_CODE_TEXT in source system QLTCLNT440
    Start of the after-import method for object type R3TR ISTS (Activation Mode)
    Reference to transfer structure 0COMP_CODE_TEXT_BB not available. No activation possible.
    Start of the after-import method for object type R3TR ISTS (Delete Mode)
    Start of the after-import method for object type R3TR ISMP (Delete Mode)
    Errors occurred during post-handling RS_AFTER_IMPORT for ISMP L
    The errors affect the following components:
       BW-WHM (Warehouse Management)
    Actually i have checked in Quality system 0COMP_CODE_TEXT is availble active. But i think we have to use 0COMP_CODE_ATTR data source...
    Pls help,,,
    Regards,
    viren.

    Hi Viren,
    Glad that your problem is resolved.
    Help.Sap.com is the best reference: http://help.sap.com/saphelp_nw04/helpdata/en/b2/e50138fede083de10000009b38f8cf/frameset.htm
    Also check the "How-To" docs in https://www.sdn.sap.com/irj/sdn/developerareas/bi
    Bye
    Dinesh

  • CJ20N project builder restriction on plant or company code

    HI there
    I hope this is in the right formum..
    I just cannot seem to get the transaction CJ20n to check on orglevel Plant (WERKS) or Company code (BUKRS).
    When displaying or changing a project people should not be able to  access projects from differents companies (or plants). When I look at the basic data, organisation fields of the project, there are CO area and Business area, as well as Company code and plant. On one of the last (company code or plant) I want to have an authorisation check wether the user is allowed to display or maintain the project
    when I trace the actions, I only find checks on
    C_PROJ_KOK (controlling areaa)
    C_PROJ_PRC (profit center)
    C_PROJ_VNR (project manager)
    but they are not company specific here
    I activated object C_PPBD Authorization for maintaining planned independent requirements SAP note 635612), but this is not being checked on transacton start or when changing project meta data e.g. description.
    Has somebody any ideas/tips on howto get CJ20n to check on WERKS (plant) or BUKRS (company code)? I would be very thankfull
    Jos

    Jos,
    It looks like your question got hijacked, so a shot at your original question regarding CJ20N:
    If you want the check upfront and not inside the transaction, then you could add it in transaction SE93. but this will only prevent the user from starting the transaction, not using it.
    If the check on F_BKPF_BUK or whatever is not coded anywhere in CJ20N, then adding or removing SU24 indicators will not help. You could try to look for a user exit ("Enhancement transactions CMOD / SMOD)). I would ask this question in the CJ20N forum.
    You could open a development request with SAP, but there would most likely need to be a few more customers with the same request or a realy good reason to add it before this materializes.
    If all of those fail, you can get yourself an object key for where ever it is that you want an additional check to be coded and change it yourself. After this, CJ20N or the check function will belong to you (not SAP) and anybody with a developer key could also change it using normal developer authorizations.
    Good luck,
    Julius

  • How to do invoice in other company code for a PO raised from one C.Code ?

    Hi
    A company has 2 company codes say A and B.
    Company code A raises a PO to a vendor and states to send the Invoice on the name of Company B, though the GoodsReceipt is done in C.Code A.
    How this scenario can be mapped into SAP-MM ?
    Cheers
    Maruthi.

    Hi Jürgen L.
    I want to post the invoice in to G/L accounts of C.Code B.
    If possible, what are the configuration settings i need to do ?
    Thanks
    Maruthi

  • How to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages for some users and allow the access for some users?

    I have a requirement to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages for some of the users and allow the access for some of the users.
    I have applied the below code on the web.config file but this modification impacting only on the web application level not on the site collection and sub site level.  
    <location path="_layouts/15/InPlaceRecordsSettings.aspx">
        <system.web>
          <authorization>
            <deny users="*" />
          </authorization>
        </system.web>
      </location>
    <location path="_layouts/15/InPlaceRecordsListSettings.aspx">
        <system.web>
          <authorization>
            <deny users="*" />
          </authorization>
        </system.web>
      </location>
    When I tried the access on
    :<portno>/sites/<scname>/_layouts/15/InPlaceRecordsSettings.aspx">http://<servername>:<portno>/sites/<scname>/_layouts/15/InPlaceRecordsSettings.aspx page allowed the access for all users.           
    Please suggest the possible solution to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages on SharePoint2013.
    Thanks
    Ramasubbu

    You can't do it from OOTB. 
    _layout folder is accessible to the users if they have read access in any of the site even subsite.
    You can modify *.aspx file, add your custom control which will check user.
    [custom.development]

  • How to build search help for company code (BUK) in SRM

    Hello,
    I am new to SRM and was wondering if any have come across similar requirement. I am a workflow developer and we are building a custom table to derive deadline escalation timelines. We are also adding a field in our custom table for company code so that we can have company specific deadlines. table T001 is empty in SRM and hence we are unable to use F4 (search help). Is there existing functionality in SRM that gets this search from the backend ECC system and displays when F4 is pressed. How can I use that functinoality?
    Appreciate any info folks.
    Thanks again.
    Samir

    Hi
    Which SRM version are you using ?
    <b>Related links -></b>
    Re: Search Help on SRM front end screen
    F4 Help for WBS Element
    Re: Company Code defaults
    Re: Search help for Custom Item level field
    Custom field in SRM as a dropdown field with values stored in R/3
    Calendar help for Date i/p field in SRM 5.0 shopping cart
    Company code
    Problems assigning values via F4 or search help
    Also There is a standard table in SRM which contains Plant data ->
    <b>BBP_LOCMAP</b> (Mapping Table Business Partner --> System --> Location)
    Try creating a  custom search help based on this Table, defined as selection method and assign the same to the related field.
    Do let me know.
    Regards
    - Atul

  • Restrict tcode MRBR on company code - Note 399953 correct?

    Hi everybody,
    In the selection screen of MRBR you have the option to select a company code, but it is NOT CHECKING on company code.
    I found a OSS note: Note 399953 - Authorization for CoCode in Logistics Invoice Verification
    This OSS notes describes exact the problem and the solution should be to use FI validation rules. We have created them, but it is not working, because it seems like that it only works for "posting" and "simulating" tcodes!!! But MRBR is more a changing tcode.
    We have put a break point into the user exit, which is used in the validation rule, but it is not executing the user exit, but for example for MR8M (posting tcode) it is working!
    Please, can anybody give me an advice how I can get MRBR checking on company code?!
    Thanks in advance, Philipp

    Hello, we are using ECC 6.0 and we do have problems to implement Note 399953 - Authorization for co code in Logistics Invoice Verification at all. Coudl you please send me a screenshot of your implementation? I am really not sure how to insert the authority check coding in the validation!
    Thanks in advance!
    Best regards
    Matthias

  • How to fetch absences configured for Company Code

    I have to fetch absences configured for a particular company code. In which table are they available? If they are not maintained in a table, how to find them out?
    Thanks,
    Sasi.

    Hi Sasi,
    There is no single table for this pupose.
    You need a three -step solution:
    First goto table T500P and find all personnel area-subarea pairs for your company code.
    Then goto T001P and find personnel subarea grouping for absence & attendance types for the respective personnel area&subarea pairs.
    Finally, goto T554S for that personnel subarea grouping and have the list of absence types.
    Regards,
    Dilek

Maybe you are looking for

  • Exchange Powershell return value from Get-command to variable.

    Hi I am trying to create a powershell-script for our monitoring-software. The script is supposed to establish a connection to our exchange-server mgmt-shell and execute this command: "Get-MailboxDatabaseCopyStatus" I have the connection in place, but

  • Why can't I access my icloud on my phone?

    I'm trying to get into my icloud but every time I click on my mail button I then click on icloud put in my username and password it says that my Apple ID has already been added to my phone but I can't access icloud anywhere on my phone. Do I need to

  • PR to PO conversions

    Hi Experts My client has the following scenerio 1. Reservations are created by different depts for the same material 2. This is added in the MRP run 3. PRs are generated out of this MRP run 4. When converetd into PO say for 10 PRs 10 line items are c

  • T.code KKRS - target data missing in reports - t.code KKSB

    Hi Gurus, when i am extracting the product hierarchy reports using the t.code KKRS. I am unable to see target data in year 2012 report only. But for year 2011, i am able to see both the target data and actual data. In 2012 i am able to see only actua

  • Calling tcode using link to url

    hi friends, i want to call tcode SE38 in webdynpro application by using linktourl. here i am going to shuffler system webgui in internet service and then right click on it then  publish->complete service. and later i am going to tcode sicf here i am