HR restrictions required across personnel areas w/o structureal auths

The business has the need to restrict their HR users to a select population of users.  Example, we need to be able to exclude the Executive population.  The executive population is across multiple organizations (personnel areas) and we cannot use the employee subtgroup field to restrict on (04) for Executives because not we have some ISA's that we have coded US-ISAs so they are not reflected in the master data as (04). We have not implemented structural authorizations but I need to know if there is a means to restricting (PA20 - display of master data) on groups of associates without structural authorizations??

Hi,
From my clients implementations so far, I have seen two approaches to restrict access to executive's PA data in PA20:
1. Based on organizational key which can be restricted at role level via auth objects- P_ORGIN
2. Implementing custom exit/BADI in the PA20 program  or implement customer specific auth object [P_NNNNN|http://help.sap.com/saphelp_470/helpdata/en/4e/74ba3bd14a6a6ae10000000a114084/content.htm] to additionally check authorization for a custom auth object while executing PA20 which restricts access for specific range of personnel numbers that belong to the executives.
In short, either organization key (i.e personnel area + cost center) or personnel number of executives should fall within a reserved number range which can be used to restrict the access to their PA data.
Thanks
Sandipan

Similar Messages

  • Restrict HR Authorization Object PLOG By HR Structural Auth Profile

    Via OSS Note 453786, SAP requested customers not to use HR Authorization Object PLOG_CON. 
    We have a requirement to restrict HR Authorization Object PLOG by HR Structural Authorization Profiles. How are other customers able to accomplish this objective without authorization object PLOG_CON being used?
    (Custom solution:  ZPLOG_CON/custom FM, or use HRBAS00_STRUAUTH BADI)?
    Thank you,
    Ken

    Ken,
    1. the note you mentioned is specific to sap version 46b. is that the version your client is on? just wanted to check.
    2. then you have not mentioned anything about the requirement, i mean explicit details.. without which it is very difficult to come to a solution.
    3. you look like you are on the right track of thinking though with the z-auth-object/function module/badi thingy...
    4. ultimately solution is dependant on the explicit requirements.
    the 'con' bit usually refers to context sensitiveness of security when a mixture of regular and structural auths would not meet the security requirements.... so at a high level:
    1. design the structural profile with the right combo of eval path and function module(z-fm?)
    2. do the right thing by plog by explicitly mentioning levels of suths for all objects and subtypes and infotypes as well.
    3. use p_origincon to assign the structural profile
    4. a combination of all of the above should do the trick...
    good luck
    cheers

  • Restrict Personnel area for executing personnel actions

    Hello,
    Guys I need your help on the following issue. Any help will be appreciated.
    The project Which i am working on has 67 Personnel Areas (PA) and 24 personnel actions.
    I need to create a role in such a way the the user will be accessing some 4-5 actions for 1 particular PA. Now I know this can be done in the authorization object P_ORGIN. But i can only give one value of PA to one particular role.
    Now the long and tedious solution for me is to create 67 different roles. I need a simple and easy to maintain solution for this.
    Again any help will be appreciated.
    Thanks,
    Mangirish

    Hi sikandar,
    Thanks for your prompt reply.
    I am already done with the infogroups using user groups. What the client now require is to restrict a user in executing personnel action for one particular personnel area.
    I know this can be done through roles but there are 67 Personnel areas and 7 different levels of user (you do the math)
    Is there a easier way out??
    Thanks,
    Mangirish

  • Restrict Personnel Areas

    Hi,
    How do we delimit the unused Personnel areas or subareas, and not display them in F4 option for the user (For actions & Master data maintenance).
    Your Quick response will be highly appreciated.
    Thanks & Regards,
    Bobby.

    Hi Bobby,
    Use a search help exit behind WERKS : H_T500P.
    Search helps are found in se11,entry help/check tab....click on H_T500P..it will lead to the search help screen...
    u will  have a name space to create search help exits...(try f4_shlp_exit for example)
    In your custom function module, restrict values.
    this workd for PA30 .
    rgds
    gayathri
    Edited by: Gayathri on Nov 20, 2009 10:48 AM

  • Authorization restriction by personal sub area wise

    Dear Friends,
    Can i restrict HR user by personal sub area. Currently i was restricted by personal area wise. But current requirement is personal sub area wise.
    Which object is to be created .
    Please reply urgently.
    Thanks,
    Regards,
    Sachin

    HI Alex,
    The standard PA authorisations P_ORGIN and P_ORGINCON do not have Personnel Subarea restrictions available unfortunately. Your only standard options are Personnel Area, Employee Group and Employee Subgroup.
    You could possibly do something using the Organisational Key field with allows you to essentially define a customised field restriction within the P_ORGIN  or P_ORGINCON object. My advice would be to try and work around this though as Org Key restrictions can get very complex if you are not careful and can be difficult to maintain as a result.
    Hope this helps.
    Best Regards,
    Richard

  • How to control PNP LDB using personnel are alone

    Hi all!
    Any body can tell me, how control the pnp ldb using personnel area and employee group. bcaz in the standard selection screen it is given as
    <u>selection.</u>
    Pers.area/subarea/cost cente :
    Employee group/subgroup
    Thx,
    palani

    Hi Palani,
    Open the ABAP report in change mode
         Select GOTO from Menu Bar
            Choose ATTRIBUTES from dropdown list
               New Window will pop-up
                   Click on button "HR REPORT CATEGORY"
                      New Popup will apeear
                         Report selects using:                                              
                         Master data
                         YOU will find lots of "rep.class" to choose here...
    Hope this will serve your requirement...
    Best Regards,
    Aslam Riaz

  • HR - PERSONNEL  AREA

    HELLO PPL,,,,
    I WANT TO CREATE A STRUCTURE WHEREIN ONE PERSONNEL AREA IS IN INDIA AND ANOTHER PERSONNEL AREA BELONGS TO A DIFFERENT COUNTRY GROUPING AND BOTH BELONGS TO THE SANE COMPANY CODE.... BUT I AM NOT ABLE TO DO THIS... CAN WE DO THIS.. OR IS THERE ANY OTHER METHOD TO DO THIS..

    Hi,
    In the Enterprise structure the Com Code is linked to PA and PSA
    You can create 2 PA under one com code
    You need to check the PY. Area linkage to PA also
    Now if the Com details are different it is advisible that you create 2 different Co. codes , Also
    the statutory details for India and Foreign location will always be different
    It depends on your requirement if the employees attached to foreign PA will have Indian Payroll only.
    In that case you can have single com code with 2 PA and the mandatory details for the foreign PA can be customized in Z reportering for MIS purpose.
    Regards
    Hemant V. Mahale

  • HR personnel area in CRM

    Hi,
    We did HR-CRM integartion and every thing is working fine. Now we have a requirement to download employee personnel area (it is there in info type 0001) into CRM system. On checking further i can see the 0001 info type data in table HRP5581 of CRM system and i can see the personnel area code values filled in it. We have a field in CRM for personnel area in Employee WEB UI screen, but the values are not showing there. Please help me to how we can populate this info in CRM?  I dont know where to see the personnel area texts in CRM and how to maintain them in CRM like we have them in table T500P of HR system. please suggest me on this as well.
    Thanks,
    Rajinikanth G

    Hi,
    How did you solve this.
    please provide the solution.
    TIA

  • Personnel area without assigning to Company code.

    Hi All,
    Can you let me know the scenario where it is not mandatory to assign a company code to the personnel area ?
    Also, is it possible to configure SAP HR for a personnel area in such a situation?
    Thanks & Regards, Swapnil Mishra

    Hi Swapnil,
    I think assignment of Personnel Area to Company Code is required when SAP HR-Payroll results are posted into Accounts, means it is required for integration of SAP HR and SAP FI. Also you will find a feature 'PPMOD' used during accounting posting also use BUKRS in decision tree.
    Regds.
    Suman

  • How to Create Personnel Area

    All HCM (HR) Community -
    I am new to SAP and I just started online training on SAP HCM...is there anyone out there who can help me with creating Personnel Area? My question is that I am trying to Create Personnel Area and I'm kind of lost in transition. I would really appreciate any help I can get.
    Regards,
    Obra

    Obra,
    Is there an existing Personnel Area to copy? If not, search though SAP web sites for direction. If so, go through the IMG as you have.
    Double click the activity u201CCopy, delete, check personnel areau201D.
    Press the u201CCopyu201D button. Press u201CEnteru201D.
    Provide the Personnel Area to be copied.
    Provide the Personnel Area to be created.
    Press u201CContinueu201D. Press u201CEnteru201D three times.
    Then SAVE.
    There will be a delay while the system copies the record.
    Press the u201CEnteru201D button.
    Press the green u201CBacku201D arrow.
    Double click the activity u201CPersonnel areasu201D.
    Press the u201CPositionu201D button near the bottom of the screen.
    Enter the newly created u201CPersonnel Areau201D, and then press u201CEnteru201D.
    Select the Personnel Area, and then press the u201CDetailsu201D button.
    Change the appropriate fields.
    Press the last button on the tool bar that resembles an envelope.
    Maintain what is required.
    Then SAVE.
    The navigation path supplied earlier also leads to Personnel Subareas, Employee Groups, and Employee Subgroups. These may already be defined. If not, you need may help brainstorming the ultimate requirements for the future. One of the things to consider is whether or not you are now or will be using the Payroll module. Personnel subareas could be used to define the shift on which an employee works if youu2019ll have people doing shift work. Employee group and subgroup fields sound like a good place to define direct and indirect employees.
    Navigate as follows to assign a Personnel Area to a Company Code:
    Enterprise Structure > Assignment > Human Resources Management > Assignment of Personnel Area to Company Code
    If you are running payroll in the US, Personnel Area is the basis for accumulating wage and tax information by legal entity. The Tax Company Code is SAP terminology for the legal entity. To assign a Personnel Area to a Tax Company Code, navigate as follows:
    Payroll > Payroll: USA > Tax > Tax Companies > Assign tax company to personnel area
    You may find the following Wiki helpful, although it doesnu2019t directly relate to creating Personnel Areas. The URL is:
    http://wiki.sdn.sap.com/wiki/display/ERPLO/SAPSDFrequentlyAskedQuestions
    Regards,
    Howard
    Edited by: Howard Gardner on Jun 29, 2011 12:55 AM

  • PA40 & Personnel Area Dropdown ABAP

    Hi,
    I'm trying to find out how personnel area dropdown list is built ( the data extracted when the dropdown button is clicked on the PA40 screen). I could see that the PA40 transaction calls HELP_START function module. But not sure how the data is read from table T500p.
    Is there any ABAPer or technical expert who can assist me with the program/function name and the section of the code that fills the internal table to display the dropdown values.
    Thank you.

    Hi,
    Getting personnel area dropdown list values in PA40
    For PA40 the structure is RP50G - Input Fields for HR Master Data Transactions
    In this above structure for the field WERKS - Personnel Area, the value list is provided through search help H_T500P from the table T500P.
    The drop down value list can be restricted through enhancing the infotype, that to not for all infotypes. For example we can't enhance the 0000 - Action infotype (SAP won't allow to enhance the infotype).
    So for SAP allowed infotypes we can enhance and restrict the values coming from T500P or else we should delete the entries from master data.
    Regards,
    Magesh

  • Personnel Area & sub area Creation

    Dear Gurus
    Currently We have to create personnel areas for my client which belongs to manufacturing sector.
    They have their  , corporate office in y place, registered office in x place , two plant locations which is situated in two other places. my question is should i make these four as personnel areas?
    subarea as department?

    Hi,
    See this enterprise structure should be framed in such a manner that they doesn't sabbotage your system as they are the building blocks.
    You can create them as follows in any of the manner .
    Example 1: Here Corporate and Plant are treated separately for future requirements for e.g in company 1111 more corporate offices like branch & registered offices are to be mapped and in plant more plant locations need to be added , so in future if someone wants the complete data of corporate and plant then they can fetch it based on Personnel Area.
    Company Code : 1111
    1)  Personnel Area : 1000 (Corporate) ---> Personnel Subarea : 1000 (Corporate Office 1) , 1001 (Corporate Office 2)
    2 ) Personnel Area : 2000 (Plant ) -
    > Personnel Subarea : 2000 (Plant Location 1 ) , 2001 (Plant Location 2)
    Example 2: +Here Corporate and Plant are considered as different locations of same company and henceforth are clubbed under one personnel area.
    Company Code : 1111
    1) Personnel Area : 1000 (Company) ---> Personnel Subarea : 1000 (Corporate) , 1001 (Plant).
    Similarly you can opt for second company also . It mostly depends on how you want to group them as many of groupings are based on Personnel Area/Subarea in PY (Payroll) , TM( Time Management) and other HR modules.
    Hope this answer will be useful.

  • Personnel area according to Company Code

    Hi,
    We have 2 different company codes. I want the personnel areas list available in the list of values for reports etc, should be corresponding to the company code of the employee.
    I would not want to do restrict this through Personal list.
    How can this be controlled?
    Regards
    Yashika

    Hi,
    You can try creating an adhoc query wherein you give Complany Code as the selection criteria and get the personnel area as per the Company Code. However, if you want multiple Company Code details in the same report, please use the sort function in the report display page of Adhoc query (You will have to provide Company Code both in the selection as well as in the display).
    With Regards,
    Kaustuv Goswami.

  • Default personnel area in PNP reports

    Hi,
    I have a requirement to default personnel area in all standard PNP reports. I notice there is a parameter id for PNPWERK. I tried setting it in user's data via SU01, however it does not seems to work. Please advice

    Hi
    Try to include the personal area field in the selection screen and default the value?
    http://help.sap.com/saphelp_46c/helpdata/EN/c6/8a15381b80436ce10000009b38f8cf/content.htm
    Regards
    Chandrasekar

  • Query on Deciding Personnel Areas

    Our customer has two factory buildings, A and B,  opposite to each other, but separated by a public road. Each building has a separate factory license. Also, they want to use positive time management, with time recording terminals at the gates of each building. Usually, an employee works from one of the buildings (say, building A), but sometimes he may be required to work for a few hours in another building (building B).
    Considering the above scenario, should we treat each building as a separate personnel area or can we combine them together as a single personnel area? What are the advantages and disadvantages in both the options?
    Kindly guide me.
    -Shambvi

    Hi,
    As of my KW , even if you Maintain seperate Personal Areas OR only one Personal Areas maintained, there is no link for Machine settings,
    for both time Machines link all EE -ID's, Then where ever he Swipe-In/Swipe Out the time details will be captured
    Thanks
    Cheera

Maybe you are looking for