OMJX authorization in production

Hi Guys,
Some user asked me to provide display access of tcode OMJX. We have given them access to all the tcodes with OM*, however he could not display OMJX.Su53 screen shot shows it requires authorization of object S_FIELDSEL and activity 03.
Can anyone tell me if I can suggest user to check some other tcode ?
Do you know what S_FIELDSEL object do?Plz dont refer me any documentation for this object.Let me know if you have used it practically.
At the end ,can you tell me the way to give him display access in production?

Hi,
There is always a thumb rule as security is concern that you should maintain the way it setup the security matrix is the only way to such kind of issues if you have setup this earlier properly then this situation a panic one to decide where or what to give authorization in which role ? First you make sure that changes of object will not be included in Display Only role if you are aware about the business impact/function for this you can build up one separate role which only include display authorization for the all respective object included in that tcode.
Just make this as standard practice and after some time you w'll able to decide with the help of bunch of excel sheet containing all the roles (display / change / critical ) based on job function for the user and where to put change / display or any other critical auth_object.
Regards;

Similar Messages

Role authorization for product selection

Hi All,
i have a requirement for which i need your help. Now my Account Manager can see all products while placing an order. I want to restrict his selection to only 5* and 6* products. That means when he will look for placing an order in the next time, he should only see 5* and 6* products not all products. Can you please tell me how to go about this role authorization.
your valuable inputs will be appreciated.
Regards,
Sasmita

Hi,
I feel Access Control Engine would be the most elegant and futuristic solution.
However, you need to review all the solutions suggested. Solution suggested by Shalini and Ashish are more practical. However, generally partner product range is used in case of Sold-to parties.
Please review all the solutions suggested and take decision based on circumstances at your client's end.
You can get more information about Access Control Engine at
http://help.sap.com/saphelp_crm40/helpdata/en/04/0177f9bb67ac4cafb84bb4d4c1d8fc/frameset.htm.
Also there are several guides and cookbooks on ACE at service market place.
Regards,
Deepak

Authorizations in Production System

Hello,
The production system is up and running.
Now the functional consultants are asking access to Production to check the config.
But they are demanding SAP_ALL with only display access
Is there an easy way to do this?
If not, kindly help me as to how I should ask my Functional consultants to proceed.
Thanks.

Hello Gautam,
Best way which i did is started giving 03,04 & 08 activities in ZSAP_ALL for all modules,other than BC_A,BC_C & BC_Z classes basis related objects(On requirement u can enable them).But it may take couple of days and its worth as well. I can explain the reasons also, for ex.if ur higher officials wants u provide display access in FI module only for a consultant,then u can disable all other modules by leaving FI only(in new role).This works very well for me.
U can find some more information from the below link and in search forum:
[Re: DISPLAY ONLY AUTHORIZATION]
Rgds,
Gadde.

Authorization for production

Hi all!
We are creating Add on for SAP Business One.
We want to authorize for user who create Production order. They only review themself documents that they created. Another user can not.
Can you help me .
Thanks!

Hi,
Why don't you give modification changes to the user who creates the documents itself.
That is nothing but pls check the user name from the document and allow to change the doccument if the current user is ths owner of the document itself. other wise generate the message says that he/she is not the person to change the production order.
Regards
Chidambaram

OB52 Authorization in Production System?

Hi,
How can OB52 Transaction code will be open in Production System? Because every month we are doing this by moving the transport from Development to Production. We are not comfortable to do this.
Kindly suggest me some points how can OB52 will be in editable mode in Production System?
Thanks

Hi,
see also OSS note 1433051 - "Open and Close Posting Periods" as current setting

Why does Apple only let you authorize 5 products on 1 account?

Is there any way arround this. Reason is that I just ordered the New iPad to replace the original iPad also I just ordered the new iPhone 5 to replace the 4. So what do you do to get it all set up? I have 3 other devices so I'm at the limit!

iTunes terms and conditions:
Association of Associated Devices is subject to the following terms:
(i) You may auto-download iTunes Auto-Delivery Content or download previously-purchased iTunes Eligible Content from an Account on up to 10 Associated Devices, provided no more than 5 are iTunes-authorized computers.
(ii) An Associated Device can be associated with only one Account at any given time.
(iii) You may switch an Associated Device to a different Account only once every 90 days.
(iv) You may download previously-purchased free content onto an unlimited number of devices while it is free on the iTunes Service, but on no more than 5 iTunes-authorized computers.
An Apple TV is not an “Associated Device.” However, TV show iTunes Products and purchased (i.e. not rented) movies iTunes Products may be played back on compatible Apple TVs, provided that you may only play back any such TV show or movie on a limited number of Apple TVs at the same time.
http://www.apple.com/legal/itunes/us/terms.html#GIFTS

Add new authorization object for production order creation/change/display

As mentioned. I definded new authorization object using "Production scheduler" (Field Name : FEVOR) by SU20. then use SU21/SU24 to add authorization object for some transaction code such as COOIS. use PFCG maintain new role and assign a fixed production scheduler value and assgin transaction code COOIS to this role. create new user ID and assign to that role.
logon system with new ID, run COOIS. but system don't check new authorization object(production scheduler). who can tell me why it is and how i can add new new authorization object for standard transaction code?
Thanks.
Kevin.WU

Hi,
there is an icon of generation. just click there in PFCG and also in su21.
then add this object in new role.
Assign this role to user id
while assigning the role also there is a generation.
Please take a help of BASIS consultant also as this is entire a BASIS process.
Regards
Amit parkhi

Analysis Authorization In Dev and impact of reports and roles in prod trans

Hello,
We are planning to switch to analysis authorization. We plan to make that change first in Dev and we were wondering what would be the impact on roles and reports we transport from dev (which is switched to Analysis Authorization) to production( on Old authirization) ? We wont transport new things to production till we switch to new auth in Prd.
Thanks a lot,
BP.

Hello
Even if you are transporting the roles from dev to quality and production, the analysis authorization objects will not be checked until you set "current procedure..." in RSCUSTV23.
So there is no harm in transporting the roles and auhotrization until you change the concept to analysis.
regards,
Payal

SAP BI 7.3 Analysis authorization transport log

Hi,
We have transported a Analysis authorization to production system, I would like to know the exact changes moved through this transport carrying a particular analysis authorization.
The issue here is RSECVAL_CL has not recorded the changes done on this particular Analysis authorization in development system.
So please suggest if there is any table where we can look to find the exact changes made by this transport request.
Regards,
Ananth
Edited by: Anantharama Shivashankar on Oct 26, 2011 6:48 PM

The issue here is RSECVAL_CL has not recorded the changes done on this particular Analysis authorization in development system
I guess that is a problem and should be reported to SAP. However this table will give the value that has been deleted. New value to be checked in analysis authorization itself.
EDITED : If the AA been transported before then might look their content and compare them.
Regards,
Arpan Paik
Edited by: P Arpan on Oct 31, 2011 3:44 PM

Hierarchy authorization pbm in BI7.0 with Front end of BW3.5

Hello All,
We have a problem regarding authorizations for the hierarchies in BW7.0
We have migrated from BW3.1 to BW7.0. Authorization are OK in our BW3.1 server, the authorization on hierrachy work well.
Current Issue (in BI7.0) :
An authorization object for XCOMPROD for a hierarchy 'ZMAT_HIER'.
There are 2 queries which have variables of XCOMPROD & ZCOMPROD in selection criteria, ZCOMPROD has variable of type 'Hierarchy node'
I've a test_user which has authorization on Product Group 5 (one of the nodes in the hierarchy-ZMAT_HIER).
When i run the queries independently with this test_user, the user has access to Group 5 only, which is correct.
When i run a web template report with any one query (from the 2 queries), the user has access to Group 5 (as in first case) - correct.
However when i run a web template report having above 2 queries together, the authorization fails, as user gets access to root node (instead of only Group 5).
FYI, we're using BW3.5 front end (no PORTALS) with the OLD authorization concept (of BW3.1). Not 'Analysis Authorization' as in BI7.0.
Looking forward to an explanation/solution to the above.
Regards,
Nagendra.

Hi,
Check out the customization of SPRO to select the authorization concept. I suspect that it's set on the new authorization concept.
Tomer.

Making PO's visible by product category

Hello,
The client wants to add some product categories especially for one of the departments.
They want to add authorization by product category but also to make the new PO's with
the new product categories invisible to purchasers from other departments.
How do I do this ?
Regards,
Rami Kleiman

Hi Rami,
You can use the BADI
BBP_WF_LIST Change Worklists and Search Results Lists
After collecting the list of PO's that a user can see, the list in inserted into this BADI where you can then make further restrictions.
Hope this helps,
Kind Regards,
Matthew

Costing Variant authorization Error

Dear Experts,
While creating Sale Order (MTO scenario) system is throwing a error "No authorization for Costing Variant XXXX in Company
Code XXXX. understand that system will calculate Sale Order Costing in this scenario. So, user should have Costing Variant authorization in his user profile.
Basically SD related users doesn't have authorization for Product Costing Objects.
And Basis guy has maintained the authrn by costing variants object level not by the T- Codes level.
How can I allow SD Users to Costing Variant authorizations?
is this the correct way?
Please help me.......
Regards,
Balaji Bhonsle.

Dear Ajay,
Firstly thanks for your help.
Is this possible to give t-code authorization by without giving costing variant authorization?
Because Client is not ready to give entire costing variant authorization.
I strongly hope that, it doesn't work any t.code autr without CV Authn related to PC Object :K_KEKO.
Is there any possibility to do this t code autrn.
Regards,
Balaji Bhonsle.

Authorization to new order type

Hi,
I have created one new order type-zpos. For this users have asked the authorization for the below activities for the user id's.
zpos order creation : users x,y,z
zpos order release : user A.
ZPOS order release (user status).
Please guide me what information i need to provide to the Basis person to provide the authorization on these activities.
Regards,
Mastan.

Hi Mastan,
C_AFKO_AWK - Plant for order type of order - For the user give the details of which plant and order type he is authorized to Basis.
C_AFKO_AWA - Authorization for Production order type/activity
01 - Indicates create order
02 - change order
03 - display order
For users x,y,z give 01 create authorization and for user A give change authorization 02 if on creation order is not released.
Thanks & Regards,
Ramagiri

Debugg a back ground task in production

Hi All,
I would like to know what are the different techniques to debugg a back ground task in production? I heard that changing WF_BATCH to dialog user and then dubugg is not a best option since we have limited authorizations in production.
Regards
RK

Hi Ramakrishna,
IN general the approach what I follow is I create a copy of the work flow which I want to debug and transport it to the PROD system. But the difference would be that in the copied work flow I make all the steps as foreground steps. For this work flow I maintain the agent assignment to user I.e. WF_ADMIN.
Or the person who is holding the role of WF_ADMIN.
The second point here is how do I start the debug work flow instead of main or original work flow. while starting work flow either by using event or directly I would populate a flag into one of container elements.
I check for this flag and if it is true then I raise an event to start test work flow.
This kind of approach can help us in so many ways
1. Without disturbing the original work flow you can change a the steps associated with work flow which is used just for testing and bug fixing.
2. You don't' have to change Work flow customizations , as you mentioned that changing WF-BATCH to some dialogue user. This kind of change can be ignored.
I would recommend that you create a separate package and create a test workflow and move the request to PROD. but make sure you don't trigger test workflow instead of original workflow.
Regards,
Pavan

Can i create a WAD directly into the production?

Hi all,
Can i create a WAD directly into the production?
thanks
Pooja

Dear Pooja,
yes you can if you have such authorizations in production system.but its not the good practice to do such testings on live system.because of the lot of loads and burdens will be there on live OLAP server.so instead of creating it in produtcion diredctly create it in dev or Quality and check your data quality and see whether your query needs tuning techniques and all then after making it all.transport the query to production and it will be deliverd to release version to the client to test it.otherwise may be your query creates some performance issues on the production system. so always follow the best practices and which is beneficial to you.
assign points if it helps...
Thanks & Regards,
Ashok

OMJX authorization in production

Similar Messages

Maybe you are looking for