Limit Access to Master data

Dear,
We are facing a request to guarantee that people from each company are only having access to their own master data (also when doing filters on customer by example).
Today they run the report, they only see their customers, but a user can always go the the properties of the characteristic and do a search on the full master data.
So we are wondering if any of you have an idea how to de-actiavte some options in the bex-analyzer to block the access to some options (like reading from master data).
Other wise, we will have to move all the sensitive information from 0CUSTOMER to 0CUST_SALES and check authorizations.
Many thanks;
Rodolphe

Dear All,
Many thanks for all your answers, but like I said we know we can look at authorizations but without even talking about the roles maintenance (which will be a pain! even if we use variables), having authorizations on customers will have bad performaces impact.
So authorizations is only the last option...
Everything would be solve if we can find a way to block the possibility of the users to change the characteristics properties read from master data.
But does anybody have an idea how to personalize the BI front-end options (and to de-activate some?)
Best regards,
Rodolphe

Similar Messages

  • How to access Master Data in ERP2005 for SD

    Hi All,
    I installed ERP2005 in my system with MS SQL.
    I do not know how to Access the Master Data in the system for SD.
    Can anybody guide me.
    Thank you,
    Ravi.

    Hi Ravi,
    Firstly, have you created any Master Data. If yes, you will be able to access the same.
    Sales Order Management Transactions Codes:
    <b>GENERAL ORDER MANAGEMENT</b>
    Reviewing Document Flow VA03
    Searching for a Customer Sales Order by Serial Number ZV11
    Order Inquiry ZV33
    <b>SALES ORDER PROCESSING</b>
    Creating Sales Order VA01
    Maintaining a Sales Order VA02
    Displaying a Sales Order VA03
    Releasing an Order or Delivery from Credit Hold: Non-Flooring VKM1
    Releasing an Order or Delivery from Flooring Hold ZKM1
    Manually Pre-authorizing Blocked Credit Card Orders Z.14
    Display List of RMAs by Customer VA05
    Confirm RMA Goods Receipt VL02
    Generate list of open return orders for deletion VA05
    Display Customer returns eligibility MCSI
    Removing a Billing Block (Approving Credit/Debit Requests) V.23
    <u><b>PRICING MASTER DATA</b></u>
    Create Pricing VK11
    Creating a Sales Deal VB21
    Maintaining a Sales Deal VB22
    Displaying a Sales Deal VB23
    Maintaining Prices VK12
    Displaying Prices VK13
    <u><b>MATERIAL MASTER DATA</b></u>
    Creating Material Substitution Master Data VB11
    Maintaining/Deleting Material Substitution Master Data VB12
    Displaying Material Substitution Master Data VB13
    Creating a Bundled Master MM01
    Creating a Sales BOM CS01
    Maintaining a Sales BOM CS02
    Displaying a Sales BOM CS03
    <u><b>CUSTOMER MASTER DATA</b></u>
    Creating Partner Records XD01
    Maintaining Customer Master Data XD02
    Displaying Customer Master Data XD03
    Deactivating a Partner VD06
    CUSTOMER CREDIT INFO
    Creating/Maintaining New Customer Credit Information FD32
    Displaying Customer Credit Information FD33
    Blocking or Unblocking a Customer VD05
    <b>SHIPPING</b>
    Creating a Delivery VL01
    Displaying a Delivery VL03
    Deleting a Delivery VL02
    Shipment Inquiry / Display VT03
    Adjusting Transfer Order - Confirmation Quantity LT12
    Collectively Confirm Transfer Order LT25
    Batch Shipment Confirmation VL19
    Creating Service Provider/Carrier Master Data XK01
    Maintaining Serive Provider/Carrier Master Data XK02
    Displaying Service Provider/Carrier Master Data XK03
    Maintaining Product Master/Serial # Profile/Unit of Measure/Shipping Unit MM02
    IDoc Inquiry WE02 / WE05
    Workflow Instructions
    <b>BILLING</b>
    Invoicing a Customer Shipment VF01
    Reprinting an Invoice VF31
    Releasing a Sales Order for Billing V.23
    Creating an Invoice by Using the Billing Due List VF04
    Checking Open Billing Documents VF05
    Create Credit/Debit Memo FB01
    <b>A/R</b>
    Controlling Total Debit/Credit bkgs F.03
    Generate FI Account balance F.08
    Generate Month-to-date Inv. register F.02
    Process payments FBZ1
    Rqst Individual Customer Corresp. FB12
    Generate Customer Correspondence F.61
    Enter Batch totals under Control ttl FB07
    Display G/L Acct. totals FBL3
    Reverse Posted Amounts FB08
    Customer Refunds FBL6
    Customer Refund to other than Payer FB05
    Clearing Debit/Credit on Cust. acct. FB1D
    Customer Balance in Local Currency F.23
    G/L Account Balance Report F.08
    Create Invoice - legal entity adjust FB01
    Generate Cust. Acct. statements F.27
    Generate Dunning Letters F150
    Generate Billing Due List VF04
    Generate Blocked Billing Doc list VFX3
    Inq. via Credit Release Screen VKM1
    List orders by partner VA05
    Past Due invoices by customer FD11
    Check number info by G/L account FBL3
    Display customer Line items FBL5
    TREASURY - CASH APPLICATION:
    Post Customer payments FF68
    Verify if A/R is updated FB03
    Hope The above details helps you.
    Regards,
    Rajesh Banka

  • What are the master Data in SAP SD

    Hi All,
    I have a question. Even though its a naive question please bear with me.
    what are the master data in SAP SD.
    These are the one's  i know.
    1)   Customer Master Data
    2)   Material  Master Data
    But what i want to know is does the following ones come under master data?
    1) Price master data
    2) Transporters master data(we are using transportation management)
    3) Route master data
    4) Customer material info records
    5) Credit master data(iam using credit management)
    What will be the master data for Transportation management(module), CIN(country India version), credit management & rebate processing
    Thanks for your valuable time & knowledge.
    Regards,
    Pavan

    Hi Pavan,
                  Just to add some more valuable information.
    <b>Organisational master data</b> : Every company is structured in a certain way. In order to work with the SAP System your company structure has to be represented in the system. This is done with the help of various organizational structures.
    <b>Condition master data</b> : In sales and distribution, products are sold or sent to business partners or services are performed for them. Data about the products and services as well as about the business partners is the basis for sales processing. Sales processing with the SAP R/3 System requires that the master data has been stored in the system.
    <b>Material master data</b> : In addition to sales and distribution, other departments of the company such as accounting or materials management access the master data. The material master data is stored in a specific structure in order to allow access from these different views.
    <b>Document master data</b> : The processing of business transactions in sales and distribution is based on the master data. In the SAP R/3 System, business transaction are stored in the form of documents. These sales and distribution documents are structured according to certain criteria so that all necessary information in the document is stored in a systematic way.
    <b>Customer Master Data</b> : or for that matter various business partners, we maintain data for them also called as the customer master data or vendor master data like that.
    Thanks & Regards
    Sadhu Kishore

  • Replacing DSO with InfoObject for storing time-dependent master data

    Hi Gurus,
    currently I am storing time-dependent contract items in a DSO. The posting items are enriched with this master data as well as some other transaction data into another consolidated DSO, which includes the time-dependency (valid from & valid to) as well for better performance. But this means that we will have a large number of records, because 1 new posting item could end up with few posting items more due to the versions of contract item.
    Since there are many posting items (>50 millions yearly, daily peak 1-2 million) and the complexity with delta management, I am considering whether to use an InfoObject for storing the contract items. The number of contract items are not many, about 300,000 after migration and about 10,000 each month.
    Hence, I would like to ask whether this approach is feasible? Is there a size limit for a master data InfoObject?
    Thanks in advance.
    Regards,
    Meng

    hi,
    The Time dependent MD object will create the same number of records for the contract item (maybe more) as each contract item will have different record for different time frame.
    this can be better explained with example.
    let us say you have 1 contract item with 2 entries one valid from 2007-2008 and the other from 2008 onwards.
    In DSO this will create 2 records, in time dependent MD object it would also create 2 records.
    In the infopackage for the MD you would need to provide the interval (time range) for the MD.
    if you provide it as 2007 till 2999 then two records will be created one with 2007-08 and other valid from 2008-999.
    However as there would be other contract items which would have lower date say 2006 then this contract item would create 3 rows, 1 row for 2006-07 with blank values, 2nd for 2007-08 and 3rd for 2008-999. This way it has more number of records than the DSO.
    In case of MD object you may not be able to delete data as well in future if the object is used in some other place.
    There will be many pros and cons of the approach you are thinking and you would have to weigh them and decide.
    regards,
    Arvind.

  • How to Lock the master data. R/3 Conflict ESS

    Dear Gurus,
    Please guide me how to lock the master data for a nos of days(say 7 days).
    Recently we had encountered an issue, related to ESS. While Uploading the Time data through t-code: PT60, our core team encountered a problem, that such and such employee number is locked.
    While checking, they identified it, system shown error against those employees, who are accessing their ESS. We check and came to know they are accessing the master data by changing their personal record i.e. address.
    Do we have any other provision to lock the master data without setting the control record to release for payroll.
    Please help .

    Create a custom transaction involving a custom views of table T7XSSSERSRV  with the following field for each service
    "V_T7XSSSERSRV-ISDISABLED"
    when HR wants to lock it, the will enter this table and check this field.
    this will disable the servcies in the front end.
    Once the 7 days are over, HR will uncheck this field. this will re-enable the services in the froint end.
    Hope this helps.

  • Master data text

    Hi,
    Could someone explain how to load master data text in BI 7.0? I want to use the 7.0 functionality, that is, infopackage to load to PSA and DTP to load to the text table. Do I have to create a transformation to do this?
    Pooja

    Hi Pooja,
    Check these links
    http://www.slideshare.net/mhonores/loading-text-data-from-sap-source-systems
    http://help.sap.com/saphelp_nw70/helpdata/EN/45/d1d742eb7d6976e10000000a1553f6/content.htm
    Also See this
    http://www.slideshare.net/mhonores/direct-access-for-master-data/
    If you still have any doubt, revert back so that i can clarify ur doubts.
    Regards,
    Rajkandula
    Edited by: Raj Kandula on Jul 19, 2008 12:22 AM

  • Any difference between Master data and User master data ?

    Any difference between Master data and User master data ?

    hi
    A user master record defines the authorizations assigned to a user. Based on these authorizations one can access the master data.
    Master data - it is the data which is used long term in SAP r/3 system such as vendor master , material master, customer master,
    there is no such thing like user master data to the best of my knowledge
    hope this helps
    regds
    Manan

  • How to restrict the Master data access for HR reports .???

    Dear SAP-HR Experts .
    I am facing a problem regarding HR reports which is appearing from HR Master Data .
    we want to restrict that a employee whose payroll area is AB (say) can only able to access the out of reoprt for payroll area AB only He/She not allowed to access the data for anyother payroll area .
    What help is required from Basis side , regarding Role / Profile etc .?
    How do we restrict this thing .
    PLease help me out .
    Kind regards : rajneesh
    Edited by: rajneesh mittal on Jul 31, 2008 1:14 PM

    Hi rajneesh,
    In the IT0001 there is a field called organizational key.
    If you're not using it for any other purpose, make it filled with "payroll area" value through customization.
    Then through PFCG -> Change authorizations, you can limit the access authorizations of roles based on payroll area (using P_ORGIN Authorization object).
    If you have further questions pls feel free to ask.
    Regards,
    Dilek

  • SYNTAX ERROR - Meterial Master Data access

    Hai Everyone,
        My development server is have some problem. the problem is i try to access some material master data transaction like MM11,  ME01, MIGO like the systax error come in to screen.
    INCLUDE report "/CBAD/SD_SFWS_SC1_CHK=========E" not found"
    duing on  CALL FUNCTION 'MATERIAL_READ_INIT' in my dump screen.
    Edited by: rajmurugan on Sep 3, 2011 6:31 AM
    Edited by: rajmurugan on Sep 5, 2011 5:55 AM

    please check whether there is some enhancement spot/point or modification in the system. other things to check could be a recent note implementation etc

  • Limit the number of Business Partner relations in BP Master data

    Hello Gurus,
    I have a requirement where I have to limit the number of business partner relations to 2 at BP Master Data.For example for a BP X, there cant be more than 2 contact persons. So in the relationship tab they should not be able to add more than 2 contact persons. I know we can do this partner processing in sales transactions, but not sure we can implement the same in BP Master Data.
    Thanks a Lot in advance for your replies,
    Krishna.

    Hi,
    You can achieve this by customizing. Go to Transaction BUBA. Double click on you relationship category. Now change the cardinality. In your case it will be 0:2 .
    This will solve your problem.
    Thanks and warm regards,
    Smita.

  • Master Data Vendor Object access from RFX

    HI all,
    I am trying to access Master Data Vendor object form RFx. I was able to find a method to get the Vendor reference from Master Agreement using doc.getVendorRef().But i don't find any direct method to get VendorReference from RFx.
    Basically i got the Vendorlist from RFX using getVendorList() method (it returns RfxVendorIBeanIfc)and able iterate and get the each supplier. But unable to access Master Data Vendor Object. My requirement is need to access Master Data Vendor object from Rfx. Since RFx has multiple suppliers.
    i am unable to access Master Data Vendor Object. its throwing exception.
    Code is as Follows:
    rfxDocHome = IBeanHomeLocator.lookup(session, RfxDocIBeanHomeIfc.sHOME_NAME);
            rfxDocBean = rfxDocHome.find(doc.getObjectReference());
    vendCol = rfxDocBean.getVendorList(); 
         itr = vendCol.iterator();
                 while(itr.hasNext()) {
                       rfxVendor = itr.next();
    mdVendHome =  IBeanHomeLocator.lookup(session,VendorIBeanHomeIfc.sHOME_NAME);
                   mdVendBean =mdVendHome.find(rfxVendor.getDocumentId());
    Thanks,
    Jali Reddy

    Hi,
    Please brief me in details.
    My observation - First the Vendor is in nature of A, over a period of time he migrated to nature B,
    Onething i can tell u that please add one more field in the output screen from there you can sort it.
    Shiv

  • Restrict access for Vendor Master Data

    Hi all.
    Our company structure is like below:
    Single instance, just one mandant.
    Company codes like 1001, 3001, 6002, 6006, etc... over the world.
    At some companies just the central administration can create vendor for the companies using the transaction XK01.
    Now we need to give access to users from one of our company from other country but we can´t give access to transaction XK01 because just the central administration can create the master data for the vendors.
    I already read about the object F_LFA1_AEN that is possible to create some field groups and give access just for the rigth groups. I also read that this authorization groups don´t have effect on the vendor master data like address.
    How can I restrict access for the vendor master data? I´m thinking to give access to transaction FK01 and MK01 and restrict access for create a new vendor, I only want that the users can create the data for a new company or new purchase organization.
    Thank you
    Darlei Friedel

    among many other authorization objects, you find following three:
    F_LFA1_GEN general data
    F_LFA1_BUK company code data
    M_LFM1_EKO purchasing org data.
    If the user does not have authorization for F_LFA1_GEN , then he cannot maintain general data.

  • Customer master data search and use limit

    Hello everyone
    I have a problem that our customer want to limit that A user of SAP  can search and use the customers master data which he or she created only .what should I do ?  thanks!

    Wierd requirement!! What will happen if the employee quits the company and a new employee takes his position and you give him a new user ID?
    I dont think it is possible through configuration/authorization. You might have to use ABAP to meet the requirement.
    Regards,
    GSL.

  • Master data services - EDIT access only

    Hi Gurus,
    I am wondering if there is an option in Master data services where I can restrict the users to only edit the records and in this case they cannot delete the records.  I see that, the update option allows both edit and delete access.  
    Also, in the security privileges table, what does the execute and control privilege exactly mean. 
    Thank you  everyone for contributions and keeping it active and wonderful.

    In the SQL2012 or SQL2014 release, there are 3 permissions, Deny, Update, ReadOnly.
    Update means user can Create, Delete, Update.
    In the SQL vnext, we are considering has granular permission as CRUD.
    For now, as a workaround, I think you can give user ReadOnly permission on the entity or membertype (leaf) level, and give update permission on each attribute. So they can edit the attribute, but cannot create/delete the member.
    Execute and control privilege are deprecated level from SQL 2008R2. They have no effect and are completely removed in the next release in the UI.

  • Can you limit the amount of data accessed per user on an AirPort Extreme?

    Can you limit the amount of data accessed per user on an AirPort Extreme?

    Your question was whether the AirPort Extreme is able to establish data limits per user.
    If you add another router that has this type of capability or install software on another router, then you will be able to establish data limits for each user. The AirPort Extreme will have no control over this.

Maybe you are looking for