PM Organization Units Authorization on User Level

Hello experts,
Is there a way to add authorization for an organization unit (i.e. Planning Plant) on a user (SU01) level and not on a authorization objects (PFCG) level?
For example,
I would like to create the following Role (profile):
ZPM_AUT_EQM_EQUIPMENT_DISPLAY
This role should be able to display equipment from the Plant Maintenance module.
However our problem is, we would like to create authorization levels with organizational units for each user:
For example:
User jsmith has ZPM_AUT_EQM_EQUIPMENT_DISPLAY assigned but can only display equipment from Planning Plant SL01.
We know we can create this authorization creating several roles, like:
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_SL01
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_SJ01
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_AG01
but our idea is not create several roles, but to assign the Planning Plant authorization on a user level and leave just one role so we would only need ZPM_AUT_EQM_EQUIPMENT_DISPLAY.
Is there a way to do this?
Thank you in advanced for your replies.
Best regards,
Fernando Montenegro

Hi ,
Could you share about your solution ? I think I have face the same problem as yours.

Similar Messages

  • Organization Units Authorization on user level

    Hello experts,
    Is there a way to add authorization for an organization unit (i.e. Company Code) on a user (SU01) level and not on a authorization objects (PFCG) level?
    For example,
    I would like to create the following Role (profile):
    ZFI_AP_REPORT_DISPLAY
    This role should be able to display AP report from the Financial module.
    However our problem is, we would like to create authorization levels with organizational units for each user:
    For example:
    User Anson has ZFI_AP_REPORT_DISPLAY assigned but can only display Report from Company Code 3202.
    We know we can create this authorization creating several roles, like:
    ZFI_AP_REPORT_DISPLAY_3201
    ZFI_AP_REPORT_DISPLAY _3202
    ZFI_AP_REPORT_DISPLAY_3203
    but our idea is not create several roles, but to assign the Company Code authorization on a user level and leave just one role so we would only need ZFI_AP_REPORT_DISPLAY.
    Is there a way to do this?
    Thank you in advanced for your replies.
    Christine Tseng

    I agree with Jurjen.  There is no point creating a "new" authorisation concept for a few transactions.  If you use standard authorisation objects for the check in your custom tcodes then you will likely have very little work to do if you assign those tcodes to existing roles.
    Even using a custom auth object & creating the variants will take up no more time than doing something like repeating the variable functionality in BI or messing about with PIDs in the UMR (which I definitely do not recommend).  By sticking with the standard concept you ensure consistency, making it much easier to support and/or handover if you move on from the role.

  • Assign a Position in CRM to an Organization Unit at a higher level.

    Hi,
    While configuring the Organizational Management in CRM 5.1, I have copied the sales areas created in ECC to CRM.
    The resulting structure is a freely definable Org Unit at the top level called Sales Area (as is was created in ECC) and under that all the Sales Organizations are existing.
    I need to create positions for the Sales Organizations and assign employees to these positions created.
    As per our client requirement, I need to create the positions at the higher level (probably the Org unit level) and assign the employees to these positions created.
    The reason for doing this is that the same employees work across different Sales Orgs.
    Is it possible to create the positions at the highest level so that they can be inherited by the Sales Orgs defined below or do i need to create the positions and the employees separately for each Sales Org.
    I would appreciate if you could answer at the earliest. I need to complete the configuration at the earliest.
    warm regards,
    Rohan Bhate

    Hello,
    Try this SAP CRM: Webclient UI - Framework for this kind of question.
    Regards,
    Fred

  • How to get the list of organization unit assigned to user

    hello All,
    i have to get the list of organization unit which is assigned to user. i mean if user ABC is assigned to 10 Org unit then how would i get those 10 sales Org? is there Any function module?
    Regards.

    hello Bruno,
    Thanks for reply...i got the Org unit with position...now i need to get territory Id / Areas related to those position's. can u help me in this regard?
    Regards

  • Organizational Unit attribute in User Info

    Hi All,
    I am working on Enterprise Portal 7.0 SP 11. I have a small problem. In Identity management, in user properties additional information, we have organizational unit as a standard SAP attribute. I want to fill that attribute while creating user through importing a text file in the beginning itself.
    While exporting a user, that information is not captured. I dont know what attribute name should be used to fill that attribute. So, can anyone tell me how to solve this issue?
    Thanks & Regards,
    Udit

    If Still interesting  this task  look
    get Organizational Unit value in Additional Information through UME API
    line in import file
    com.sap.security.core.usermanagement:orgunit=SOME_ORGANIZATION_UNIT

  • View of organizational unit in Service request

    Hi everyone,
    In our service request, we are trying to visualise all the organizational unit (of the organization model) of a BP.
    We achieve to see the direct service group where the BP is assigned but we are trying to see more of the link to the organizational model.
    For example : our organizational model looks like this:
    For user AJAUSSAUD1, I can see the direct link to PSE Equiment in my service request (this is determined in the partner schema determination)
    However, we would like to be able to see MC1 (here 3 level above) in the service request.
    We are using service organization as function and all the organizational unit are determined as service organization as we are using it to authorizations access.
    Does anyone know if there is a way to see the link with all the organizational unit of a user in a service request?
    Would it be with the attribute available in the ppoma-crm, but how to add the field and make them available in the service request view?
    Thank you,
    Regards,
    Anaïs

    Hello Anais,
    As far as I know, there is no standard way to view an organizational hierarchy in a service request. You will need to do some developments. There are two options -
    1. If you want the 3 org levels to be stored in data base table for future reference and reporting
    You can add 3 fields in ORGMAN sub object using AET. This will add the fields to table CRMD_ORGMAN. After org determination has happened in your service request, you can use BAdi - CRM_ORGMAN_BADI, methd - CRM_ORGMAN_MERGE to fill values of these 3 org levels. You have to recursively use functions or query table HRP1001 to get the parent of determined service org and then its parent and so on.
    Remember once these 3 fields are added at database level, they are available for all transaction types of one order. These fields can be made available to BW queues also at time of adding them.
    2. If you do not want the 3 org levels to be stored in data base table
    This would mean you only want these fields for display to end user.
    Add 3 model nodes in the web ui component. In the getter method of 1st field, add select query or call function to get parent of determined service org. Similarly for other 2 fields.
    Hope this will help. Maybe you also get some different suggestion from other guys.
    Regards,
    Niraj

  • Adding a specific org unit with a user id.

    Hi SAP Master,
    How can I add a specific organization Unit with a particular User Id, i.e when ever that user id logs in into system and create a transaction the org. unit assigned with him determined automatically.
    And one more query, how can we send a org. unit for approval? 
    Thanks and Regards
    Rahul
    Edited by: Rahul07 on Jun 10, 2011 10:18 AM

    Hi Rahul,
    We don't assign the Organization unit to the user in the SU01. In SU01 we assing the PFCG roles and authorization related stuff.
    Rather we create the Organization model, assign positions and then assign the user to the relevant position under the required organization unit using the tcode "PPOMA_CRM".
    When you setup the Organization determination procedure, then automatically while creating the transaction, the Organization Unit of the person who is creating the Transaction gets determined.
    rgrds,
    Randhir

  • How to determine Organizational Data based on User Login

    Dear all,
    How to determine organizational data based on user login in Activity transaction, currently org determination is happening after entering customer number in the transaction.
    We have used 'Responsibility' determination rule for this configuration. Now the requirement is to determine org data based on user login.
    In Org model we have assigned user to org data through a business partner. But still org data is not getting determined in the transaction.
    Please help me to trace out the problem.. your suggestions will be highly appreciated.
    Best regards
    Raghu ram

    You just have to use other organization determination rule. In your case this would be rule 10000194 (ORGMAN_12). This determination rule delivers the responsible organizational unit of the user
    User is defined as a business partner in the container attribute 'PARTNER'. If not, the system user (sy-uname) is used.
    So you have to do the following:
    - use this determination rule
    - in BP link username with employee
    - assign in PPOMA_CRM employee or user to organizational unit
    This should solve your problem.

  • Have to diplay all the active employees in an Organizational unit n HR ABAP

    HI,
    I am new to HR ABAP.
    In my selection screen I have to get the Organizational unit from the user and based on that organizational unit value i have to display the details like  pernr,fname and other fields of all the active employee in that OU.
    I have to use logical database in the program .
    so it would be helpful if anyone of you can give some idea or send some sample programs or materials for reference.
    Regards,
    Kiruthi

    HI,
    I am new to HR ABAP.
    In my selection screen I have to get the Organizational unit from the user and based on that organizational unit value i have to display the details like  pernr,fname and other fields of all the active employee in that OU.
    I have to use logical database in the program .
    so it would be helpful if anyone of you can give some idea or send some sample programs or materials for reference.
    Regards,
    Kiruthi

  • Automount SSHFS drive in user-level systemd session

    Hello,
    I'm able to automount a network drive through SSHFS using the following .mount unit in the system-level systemd session:
    [Unit]
    Description=adama shared drive
    [Mount]
    What=[email protected]:/home/shared
    Where=/home/koral/remote/adama
    Type=fuse.sshfs
    Options=_netdev,noauto,users,idmap=user,IdentityFile=/home/koral/.ssh/id_rsa,allow_other
    [Install]
    WantedBy=default.target
    As is, the network drive is mounted at system start-up and it is read/write-able by any user logged into the local system.
    I'd like the drive to be mounted only when my $USER logs-in and read/write-able only by my $USER, so I considered moving the .mount unit to my user-level systemd session, but now the automounting fails with an unhelpful error message:
    systemd[1969]: Mounting adama shared drive...
    systemd[1969]: home-koral-remote-adama.mount mount process exited, code=exited status=1
    systemd[1969]: Failed to mount adama shared drive.
    systemd[1969]: Unit home-koral-remote-adama.mount entered failed state
    I guess there is a permission issue somehow, could you please help figuring it out ?
    Note: I'm still using systemd-204 as the user-level session is kind of broken in later versions as described here.
    Kind regards.
    Last edited by koral (2014-03-30 17:54:45)

    xtian wrote:I can mount using the manual command `$sshfs [email protected]:/ /mnt/mrwizard.local`
    According to the above your username is xtian, which it isn't in your fstab entry:
    xtian wrote:[email protected]:/ /mnt/mrwizard.local ...
    So without having looked for further errors nor knowing anything about sshfs, I would suppose to change this.
    Sometimes simple spelling errors are actually the hardest to solve. – Like I always try to '#include <some_library.c>'.

  • How to check Organizational Unit

    Hi experts,
    How many ways are there to check the organizational unit of an User? (i need Tcodes or tables to check)
    Thanks in advance

    tables
    V_T527X thru SM30
    PO10 tcode  expert mode
    ppoc_old to create  tcode
    PPom_old change  tcode
    PPOs_old  display  tcode   simple maintianence
    Ppoce  create
    Ppome  change
    Ppose  display       organisational planning and staffing
    Ppsc create
    Ppsm  change
    Ppss display            general structures
    PpmE  change
    PPMS  Display
                                    Matrix Structure
    Edited by: Sikindar on Oct 24, 2008 5:11 PM

  • Authorization required for creating new Organizational units

    Hi all,
    How can we give authorization required for creating new Organizational units (IMG – CRM – Master Data – Organizational Management – Organizational Model – Create Organizational Model) to a particular user?
    Thanks and Regards,
    Archana

    the basis guy should be able to help.
    at a higher level: you need to set authorizations to the roles assigned, the transaction code is pfcg.
    you may create a new role with the required authorization and assign to the relevant users.
    hope it helps..
    regards
    RH

  • How to Control authorization for users with certain status for level 2 WBS Element

    Dear All,
    Is there any standard way or enhancement available to control authorization for users with certain status for WBS Element i.e. for example
    Pre-requisite:
    There is only 2 level of project i.e.
    Lev_ WBSE_______Description
    1___ 7-14.E_______summay outage controller
    2___ 7-14.E.2310__ Plant/unit # 2310
    2___ 7-14.E.2310__ Plant/unit # 2220
    Project Controller  (authorization role assigned "Z_PS_OP7_OTGCON_C") have all project level authorization
    Plant/Unit Controller (authorization role assigned "Z_PS_OP7_PLNTOTG_C_2310") have only level 2 authorization with enhancement that we did in system by Z table.
    User ID_ Plant #
    123345_ 2310
    122455_ 2220
    Issue:
    After System Status released and User Status approved the WBS basic date for Plant/Units should be restricted from updating/changing by Plant/Unit Controller level and only project controller should have this authority.
    Solution required: 
    Can any one tell how to control this scenario either by standard or enhancement available to control authorization
    BR
    Saqib Usman   

    Hi,
    Did you explore SAP Enhancement CNEX0002 Using Transaction CMOD?
    Thank you and regards,
    Varshal Kachole
    The SCN Rules of Engagement

  • Authorization required for creating new Organizational units in CRM

    Hi all,
    How can we give authorization required for creating new Organizational units (IMG – CRM – Master Data – Organizational Management – Organizational Model – Create Organizational Model) to a particular user?
    Thanks and Regards,
    Archana

    Hi archana,
    U can Create a role through Transaction PFCG.
    Just create a role and assign the tcode PPOCA_CRM if u want to give the user just only this authorization otherwise u can select the menu list from sap menu and assign this role to that user.
    Another way is if that user already exist in that system then just assign that particular transaction codr with that user.
    Hope it will help u
    Regards
    Subhash

  • LSO course authorization for Organizational Unit

    Hi,
    Is is possible to restrict courses in a course catalog according to Organizational unit. In the system we can restrict users to specific courses through structural authorization, but is it possible to maintain authorizations on Organizational units for LSO Courses or course types.
    Regards,
    Asad

    Disappering is the right behavior. On delivery method WBT participant type 'O' cannot be booked because WBT can be only accessed using Learning portal and Learning portal cannot be logged in using Org. Unit. So this is not possible for this release.
    But i have heard in EHP4 this option of Org. unit booking on WBT is possible but not directly but system will take care if you select an org unit for booking.
    Regards, kavya
    Edited by: Kavya Shree on Oct 30, 2008 10:08 AM

Maybe you are looking for

  • Error in copy of BCALV_TREE_SIMPLE_DEMO

    I copied BCALV_TREE_SIMPLE_DEMO  to a z version, changed it with own structure DATA: gt_sflight      TYPE zhpa_vakantie_struc OCCURS 0, "sflight OCCURS 0,      "Output-Table now when running an error occurs, i think this has to do with the screen col

  • Problem with RBDMIDOC in executing for diff logical systems

    Hi ALL, We are using message type HRMD_A and we have configured two logical systems using that message.So when we execute RBDMIDOC to generate idoc for change pointers  it triggers idocs to both the logical system which we dont want.Is there any othe

  • How to Put Controls on SWF File... then Export  to FLV

    Have a swf file that self plays. What I Need: I need to imbed this self playing 2 minute video clip with sound...but I want it to have controls on it and be paused. I want to use dreamweaver to place it in the web page but stupid dreamweaver only put

  • WRT600N Storage Link Problems

    I'm just adding to the litany of woes regarding the problems with the Storage Link feature on this router, but I wanted to point out some specifics based on my sorry experience, since others seem to be somewhat different or lacking in detail. Here is

  • Eclipse Error : javax.resource.cci.connection not found

    Hi,   I am new to Eclipse development. I downloaded a Sap connector PAR project from sdn and imported it in Eclipse then i showed lots of error with portal.HTMLB, portal.connector and javax.resource.cci.connection.   I want to know where can i find t