PM Organization Units Authorization on User Level
Hello experts,
Is there a way to add authorization for an organization unit (i.e. Planning Plant) on a user (SU01) level and not on a authorization objects (PFCG) level?
For example,
I would like to create the following Role (profile):
ZPM_AUT_EQM_EQUIPMENT_DISPLAY
This role should be able to display equipment from the Plant Maintenance module.
However our problem is, we would like to create authorization levels with organizational units for each user:
For example:
User jsmith has ZPM_AUT_EQM_EQUIPMENT_DISPLAY assigned but can only display equipment from Planning Plant SL01.
We know we can create this authorization creating several roles, like:
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_SL01
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_SJ01
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_AG01
but our idea is not create several roles, but to assign the Planning Plant authorization on a user level and leave just one role so we would only need ZPM_AUT_EQM_EQUIPMENT_DISPLAY.
Is there a way to do this?
Thank you in advanced for your replies.
Best regards,
Fernando Montenegro
Hi ,
Could you share about your solution ? I think I have face the same problem as yours.
Similar Messages
-
Organization Units Authorization on user level
Hello experts,
Is there a way to add authorization for an organization unit (i.e. Company Code) on a user (SU01) level and not on a authorization objects (PFCG) level?
For example,
I would like to create the following Role (profile):
ZFI_AP_REPORT_DISPLAY
This role should be able to display AP report from the Financial module.
However our problem is, we would like to create authorization levels with organizational units for each user:
For example:
User Anson has ZFI_AP_REPORT_DISPLAY assigned but can only display Report from Company Code 3202.
We know we can create this authorization creating several roles, like:
ZFI_AP_REPORT_DISPLAY_3201
ZFI_AP_REPORT_DISPLAY _3202
ZFI_AP_REPORT_DISPLAY_3203
but our idea is not create several roles, but to assign the Company Code authorization on a user level and leave just one role so we would only need ZFI_AP_REPORT_DISPLAY.
Is there a way to do this?
Thank you in advanced for your replies.
Christine TsengI agree with Jurjen. There is no point creating a "new" authorisation concept for a few transactions. If you use standard authorisation objects for the check in your custom tcodes then you will likely have very little work to do if you assign those tcodes to existing roles.
Even using a custom auth object & creating the variants will take up no more time than doing something like repeating the variable functionality in BI or messing about with PIDs in the UMR (which I definitely do not recommend). By sticking with the standard concept you ensure consistency, making it much easier to support and/or handover if you move on from the role. -
Assign a Position in CRM to an Organization Unit at a higher level.
Hi,
While configuring the Organizational Management in CRM 5.1, I have copied the sales areas created in ECC to CRM.
The resulting structure is a freely definable Org Unit at the top level called Sales Area (as is was created in ECC) and under that all the Sales Organizations are existing.
I need to create positions for the Sales Organizations and assign employees to these positions created.
As per our client requirement, I need to create the positions at the higher level (probably the Org unit level) and assign the employees to these positions created.
The reason for doing this is that the same employees work across different Sales Orgs.
Is it possible to create the positions at the highest level so that they can be inherited by the Sales Orgs defined below or do i need to create the positions and the employees separately for each Sales Org.
I would appreciate if you could answer at the earliest. I need to complete the configuration at the earliest.
warm regards,
Rohan BhateHello,
Try this SAP CRM: Webclient UI - Framework for this kind of question.
Regards,
Fred -
How to get the list of organization unit assigned to user
hello All,
i have to get the list of organization unit which is assigned to user. i mean if user ABC is assigned to 10 Org unit then how would i get those 10 sales Org? is there Any function module?
Regards.hello Bruno,
Thanks for reply...i got the Org unit with position...now i need to get territory Id / Areas related to those position's. can u help me in this regard?
Regards -
Organizational Unit attribute in User Info
Hi All,
I am working on Enterprise Portal 7.0 SP 11. I have a small problem. In Identity management, in user properties additional information, we have organizational unit as a standard SAP attribute. I want to fill that attribute while creating user through importing a text file in the beginning itself.
While exporting a user, that information is not captured. I dont know what attribute name should be used to fill that attribute. So, can anyone tell me how to solve this issue?
Thanks & Regards,
UditIf Still interesting this task look
get Organizational Unit value in Additional Information through UME API
line in import file
com.sap.security.core.usermanagement:orgunit=SOME_ORGANIZATION_UNIT -
View of organizational unit in Service request
Hi everyone,
In our service request, we are trying to visualise all the organizational unit (of the organization model) of a BP.
We achieve to see the direct service group where the BP is assigned but we are trying to see more of the link to the organizational model.
For example : our organizational model looks like this:
For user AJAUSSAUD1, I can see the direct link to PSE Equiment in my service request (this is determined in the partner schema determination)
However, we would like to be able to see MC1 (here 3 level above) in the service request.
We are using service organization as function and all the organizational unit are determined as service organization as we are using it to authorizations access.
Does anyone know if there is a way to see the link with all the organizational unit of a user in a service request?
Would it be with the attribute available in the ppoma-crm, but how to add the field and make them available in the service request view?
Thank you,
Regards,
AnaïsHello Anais,
As far as I know, there is no standard way to view an organizational hierarchy in a service request. You will need to do some developments. There are two options -
1. If you want the 3 org levels to be stored in data base table for future reference and reporting
You can add 3 fields in ORGMAN sub object using AET. This will add the fields to table CRMD_ORGMAN. After org determination has happened in your service request, you can use BAdi - CRM_ORGMAN_BADI, methd - CRM_ORGMAN_MERGE to fill values of these 3 org levels. You have to recursively use functions or query table HRP1001 to get the parent of determined service org and then its parent and so on.
Remember once these 3 fields are added at database level, they are available for all transaction types of one order. These fields can be made available to BW queues also at time of adding them.
2. If you do not want the 3 org levels to be stored in data base table
This would mean you only want these fields for display to end user.
Add 3 model nodes in the web ui component. In the getter method of 1st field, add select query or call function to get parent of determined service org. Similarly for other 2 fields.
Hope this will help. Maybe you also get some different suggestion from other guys.
Regards,
Niraj -
Adding a specific org unit with a user id.
Hi SAP Master,
How can I add a specific organization Unit with a particular User Id, i.e when ever that user id logs in into system and create a transaction the org. unit assigned with him determined automatically.
And one more query, how can we send a org. unit for approval?
Thanks and Regards
Rahul
Edited by: Rahul07 on Jun 10, 2011 10:18 AMHi Rahul,
We don't assign the Organization unit to the user in the SU01. In SU01 we assing the PFCG roles and authorization related stuff.
Rather we create the Organization model, assign positions and then assign the user to the relevant position under the required organization unit using the tcode "PPOMA_CRM".
When you setup the Organization determination procedure, then automatically while creating the transaction, the Organization Unit of the person who is creating the Transaction gets determined.
rgrds,
Randhir -
How to determine Organizational Data based on User Login
Dear all,
How to determine organizational data based on user login in Activity transaction, currently org determination is happening after entering customer number in the transaction.
We have used 'Responsibility' determination rule for this configuration. Now the requirement is to determine org data based on user login.
In Org model we have assigned user to org data through a business partner. But still org data is not getting determined in the transaction.
Please help me to trace out the problem.. your suggestions will be highly appreciated.
Best regards
Raghu ramYou just have to use other organization determination rule. In your case this would be rule 10000194 (ORGMAN_12). This determination rule delivers the responsible organizational unit of the user
User is defined as a business partner in the container attribute 'PARTNER'. If not, the system user (sy-uname) is used.
So you have to do the following:
- use this determination rule
- in BP link username with employee
- assign in PPOMA_CRM employee or user to organizational unit
This should solve your problem. -
Have to diplay all the active employees in an Organizational unit n HR ABAP
HI,
I am new to HR ABAP.
In my selection screen I have to get the Organizational unit from the user and based on that organizational unit value i have to display the details like pernr,fname and other fields of all the active employee in that OU.
I have to use logical database in the program .
so it would be helpful if anyone of you can give some idea or send some sample programs or materials for reference.
Regards,
KiruthiHI,
I am new to HR ABAP.
In my selection screen I have to get the Organizational unit from the user and based on that organizational unit value i have to display the details like pernr,fname and other fields of all the active employee in that OU.
I have to use logical database in the program .
so it would be helpful if anyone of you can give some idea or send some sample programs or materials for reference.
Regards,
Kiruthi -
Automount SSHFS drive in user-level systemd session
Hello,
I'm able to automount a network drive through SSHFS using the following .mount unit in the system-level systemd session:
[Unit]
Description=adama shared drive
[Mount]
What=[email protected]:/home/shared
Where=/home/koral/remote/adama
Type=fuse.sshfs
Options=_netdev,noauto,users,idmap=user,IdentityFile=/home/koral/.ssh/id_rsa,allow_other
[Install]
WantedBy=default.target
As is, the network drive is mounted at system start-up and it is read/write-able by any user logged into the local system.
I'd like the drive to be mounted only when my $USER logs-in and read/write-able only by my $USER, so I considered moving the .mount unit to my user-level systemd session, but now the automounting fails with an unhelpful error message:
systemd[1969]: Mounting adama shared drive...
systemd[1969]: home-koral-remote-adama.mount mount process exited, code=exited status=1
systemd[1969]: Failed to mount adama shared drive.
systemd[1969]: Unit home-koral-remote-adama.mount entered failed state
I guess there is a permission issue somehow, could you please help figuring it out ?
Note: I'm still using systemd-204 as the user-level session is kind of broken in later versions as described here.
Kind regards.
Last edited by koral (2014-03-30 17:54:45)xtian wrote:I can mount using the manual command `$sshfs [email protected]:/ /mnt/mrwizard.local`
According to the above your username is xtian, which it isn't in your fstab entry:
xtian wrote:[email protected]:/ /mnt/mrwizard.local ...
So without having looked for further errors nor knowing anything about sshfs, I would suppose to change this.
Sometimes simple spelling errors are actually the hardest to solve. – Like I always try to '#include <some_library.c>'. -
How to check Organizational Unit
Hi experts,
How many ways are there to check the organizational unit of an User? (i need Tcodes or tables to check)
Thanks in advancetables
V_T527X thru SM30
PO10 tcode expert mode
ppoc_old to create tcode
PPom_old change tcode
PPOs_old display tcode simple maintianence
Ppoce create
Ppome change
Ppose display organisational planning and staffing
Ppsc create
Ppsm change
Ppss display general structures
PpmE change
PPMS Display
Matrix Structure
Edited by: Sikindar on Oct 24, 2008 5:11 PM -
Authorization required for creating new Organizational units
Hi all,
How can we give authorization required for creating new Organizational units (IMG CRM Master Data Organizational Management Organizational Model Create Organizational Model) to a particular user?
Thanks and Regards,
Archanathe basis guy should be able to help.
at a higher level: you need to set authorizations to the roles assigned, the transaction code is pfcg.
you may create a new role with the required authorization and assign to the relevant users.
hope it helps..
regards
RH -
How to Control authorization for users with certain status for level 2 WBS Element
Dear All,
Is there any standard way or enhancement available to control authorization for users with certain status for WBS Element i.e. for example
Pre-requisite:
There is only 2 level of project i.e.
Lev_ WBSE_______Description
1___ 7-14.E_______summay outage controller
2___ 7-14.E.2310__ Plant/unit # 2310
2___ 7-14.E.2310__ Plant/unit # 2220
Project Controller (authorization role assigned "Z_PS_OP7_OTGCON_C") have all project level authorization
Plant/Unit Controller (authorization role assigned "Z_PS_OP7_PLNTOTG_C_2310") have only level 2 authorization with enhancement that we did in system by Z table.
User ID_ Plant #
123345_ 2310
122455_ 2220
Issue:
After System Status released and User Status approved the WBS basic date for Plant/Units should be restricted from updating/changing by Plant/Unit Controller level and only project controller should have this authority.
Solution required:
Can any one tell how to control this scenario either by standard or enhancement available to control authorization
BR
Saqib UsmanHi,
Did you explore SAP Enhancement CNEX0002 Using Transaction CMOD?
Thank you and regards,
Varshal Kachole
The SCN Rules of Engagement -
Authorization required for creating new Organizational units in CRM
Hi all,
How can we give authorization required for creating new Organizational units (IMG CRM Master Data Organizational Management Organizational Model Create Organizational Model) to a particular user?
Thanks and Regards,
ArchanaHi archana,
U can Create a role through Transaction PFCG.
Just create a role and assign the tcode PPOCA_CRM if u want to give the user just only this authorization otherwise u can select the menu list from sap menu and assign this role to that user.
Another way is if that user already exist in that system then just assign that particular transaction codr with that user.
Hope it will help u
Regards
Subhash -
LSO course authorization for Organizational Unit
Hi,
Is is possible to restrict courses in a course catalog according to Organizational unit. In the system we can restrict users to specific courses through structural authorization, but is it possible to maintain authorizations on Organizational units for LSO Courses or course types.
Regards,
AsadDisappering is the right behavior. On delivery method WBT participant type 'O' cannot be booked because WBT can be only accessed using Learning portal and Learning portal cannot be logged in using Org. Unit. So this is not possible for this release.
But i have heard in EHP4 this option of Org. unit booking on WBT is possible but not directly but system will take care if you select an org unit for booking.
Regards, kavya
Edited by: Kavya Shree on Oct 30, 2008 10:08 AM
Maybe you are looking for
-
Error in copy of BCALV_TREE_SIMPLE_DEMO
I copied BCALV_TREE_SIMPLE_DEMO to a z version, changed it with own structure DATA: gt_sflight TYPE zhpa_vakantie_struc OCCURS 0, "sflight OCCURS 0, "Output-Table now when running an error occurs, i think this has to do with the screen col
-
Problem with RBDMIDOC in executing for diff logical systems
Hi ALL, We are using message type HRMD_A and we have configured two logical systems using that message.So when we execute RBDMIDOC to generate idoc for change pointers it triggers idocs to both the logical system which we dont want.Is there any othe
-
How to Put Controls on SWF File... then Export to FLV
Have a swf file that self plays. What I Need: I need to imbed this self playing 2 minute video clip with sound...but I want it to have controls on it and be paused. I want to use dreamweaver to place it in the web page but stupid dreamweaver only put
-
I'm just adding to the litany of woes regarding the problems with the Storage Link feature on this router, but I wanted to point out some specifics based on my sorry experience, since others seem to be somewhat different or lacking in detail. Here is
-
Eclipse Error : javax.resource.cci.connection not found
Hi, I am new to Eclipse development. I downloaded a Sap connector PAR project from sdn and imported it in Eclipse then i showed lots of error with portal.HTMLB, portal.connector and javax.resource.cci.connection. I want to know where can i find t