Properties of authorization group.
Hi Experts,
I have one query regarding authorization group creation.
In my old system i have one authorization group as X. I wanted to create the similar type of authorization group in new system.
Using tcode S_ALR_87099664 I can create the authorization group. But first I wanted to see the properties/attributes of authorization group X in old system.
Please suggest where exactly i can see the properties/attributes of authorization group.
Regards,
Poonam
Hi Neha,
refer to this link
Re: T.code for Create Authorization Group
http://www.sapmaterial.com/authorization_checks.html
hope this wil use ful to you.
Thanks
Similar Messages
-
Cant use more than one authorization group per report with SBO CR Basic
Cant use more than one authorization group per report with SBO CR Basic.
I have installed on SAP Business One SBO 2007 SP00 PL49 the Crystal Reports Basic 2.0.0.7.
i have defined two users, manager and supervisor.
I have defined two groups, M and S.
Manager belongs in managers (M), and supervisor is assigned to the supervisors (S).
i enter to one report, disable the public option to enable group authorization, and then check M group.
Manager can see the report, but Supervisor is not allowed. So far good.
Then i uncheck M, then check S in the report properties, and Manager cant get in, supervisor opens the report, So far good.
But when we check both Groups or more, only the M group authorization appears to work, and S group users cant acess, even the report is allowed for that group, also happens with all the groups appart the first (2nd, 3rd, 4th, etc.).
It seems that a report can manage a single group, but i have to be shure to tell this to the customer.
So far we have included all Manager users to the S group in order that only S group is used and authorized users can use, but this is duplicating user participation in groups, and it would be much easier to check the desired groups for a single report.Cant use more than one authorization group per report with SBO CR Basic.
I have installed on SAP Business One SBO 2007 SP00 PL49 the Crystal Reports Basic 2.0.0.7.
i have defined two users, manager and supervisor.
I have defined two groups, M and S.
Manager belongs in managers (M), and supervisor is assigned to the supervisors (S).
i enter to one report, disable the public option to enable group authorization, and then check M group.
Manager can see the report, but Supervisor is not allowed. So far good.
Then i uncheck M, then check S in the report properties, and Manager cant get in, supervisor opens the report, So far good.
But when we check both Groups or more, only the M group authorization appears to work, and S group users cant acess, even the report is allowed for that group, also happens with all the groups appart the first (2nd, 3rd, 4th, etc.).
It seems that a report can manage a single group, but i have to be shure to tell this to the customer.
So far we have included all Manager users to the S group in order that only S group is used and authorized users can use, but this is duplicating user participation in groups, and it would be much easier to check the desired groups for a single report. -
List Queries/Infosets by authorization group.
I have a number of Queries/Infosets that have authorization group assignments in SQ02. Is there a way to produce a list of all Queries/Infosets that belong to a specific authorization group?
Regards,
DavidAuthorization Group as setup in the Infoset Global Properties.
Thanks,
David -
Assign posting periods to authorization group in tcode S_ARL_87003642
Hello,
I want to restrict posting periods for some users. Therefore, I have created 2 functions associated to 2 authorization groups.
In transaction S_ARL_87003642, when I try to assign different posting periods to each authorization group to the same company code (Posting Period Variant) it appears a message saying u2018Target key must be different from source keyu2019.
What am I doing wrong? Do you know how can I restrict posting periods for some users?
Thanks and regards
Ana RitaDear,
You simply have to define authorisation groups in OB52 and assign this group to F_bkpf_bup in SU01 against user proflie as desired. Take basis help.
Regards -
Authorization Group for G/L Account
Hi,
What?
- I wish to restrict the 'posting' of a G/L account to be done by certain users only
How?
- What I have done was...
a) From FS00, I have added a free-text (BANK) into the Authorization Group for a G/L account
b) From PFCG, a new role was created to allow these 2 Authorization Objects, F_BKPF_BES and F_SKA1_BES
c) 'BANK' was entered for the Authorization Group for both these 2 Authorization Objects
d) From there, I have assigned this new role to the user that I wish to allow Posting of the G/L account
Problem?
- Other users still can do Posting for this G/L account
- Any steps which I have missed out here or done wrongly?
Thanks,
BrandonHi,
Some other roles of the users may override and cause the users to post against this GL account.
Check all the roles relevant for the restricted users.
Use SUIM t-code to find if the auth object mentioned above is included in any other role.
If it be, restrict that again.
Generally if one role as no restriction against this auth and not all, this issue tends to happen.
Regards,
Sridevi -
Restrict Vendor line items display by Vendor authorization group
Hi Gurus,
I have a requirement to restrict Vendor line item diplay for Tcode FBL1N, I have updated the Authorization object F_LFA1_BEK, its work fine if all the vendors have authorization, However it also display vendors whose auth. group is "BLANK" or "SAPCE",
Is there a way that I can slove this issue, is there any SAP notes of other object which needs to be updated ?Hi,
this problem has been discussed on this forum last week. Basically, SAP does not perform authorization check if the authorization group is blank. Hence you need to assign authorization object to all vendors.
Cheers -
Authorization group in GL A/C
Hi,
I have a role that has the authorization group in the authorization objects F_BKPF_BES , F_SKA1_BES updated only with 'AUTH' but the same role is also able to access GL accounts with authorization group 'REST'.
I want to restrict the role to access GL Accounts only with authorization group 'AUTH'.
How to do it.Kindly advise.
Thanks.GL account Authorization
Re: How to create authorization groups for G/L Accounting
Thanks
Javed -
Authorization group in GL A/C using FB01
HI, We have activated the authorization Group in GL A/c. Using the authorization object F_BKPF_BES we were able to create restrictions on other tcodes like F-28 . However when using the u201CFB01u201D tcode, the authorization check does not have any effect. I have already check the authorization in SU24 for fb01 and status is set to YES. I have also created a trace(using ST01) for this transaction but ST01 does not show any authorization trace for F_BKPF_BES.
Hello,
Authorization object:F_BKPF_BES should be checked when you run FB01.
In your case,please try to check the following points:
1.Authrization group was assigend to G/.L master data correctly.
2.Authrization group was assigend to object:F_BKPF_BES correctly.
3.Avtivity was defined in this object correctly.
4.Role was assgined to user correctly.
5.SAP_ALL authorization was deleted from the user profile.
Note: it is impossible to define the authorization group as ' '(space) in object:F_BKPF_BES,
if ' ' was defined, system will consider there are no any setting existed.
Hope the above infor. could help you to solve this issue.
Best Regards, -
Creation of Authorization group
Hello All,
I have a requirement from FI consultant for creation of new authorization group. This auth. group we want to use in FI objects like F_BKPF_BEK. so that for few end users they should not change any vendor data in FK02.
I have gone through several posts, but not able to get / understand clear steps for creation of auth group and assignment.
One of the post i found is below:
[How to create Authorization group;
i tried to do few steps but not in right direction. Request you some one please suggest me the steps for cration.
Rgds,
Durga.Julius,
Thanks for the update. As suggested by you i have inserted one entry of auth group in TBRG table against FI object with SE16.
Now how do we maintain the view of V_TBRG. Is it from SE11?, if yes then i should do this step from ABAP login.
But what i heard is, this activity is purely involved by Basis people.
Please suggest.
Rgds,
Durga. -
Customer Master Data and Line Items Balances Display - Authorization Group
One autorization group was created and assigned to some customer masters in General, Company Code and Sales Area's.
User is restricted to one authorization group. When executing FBL5N, all customer balances are displayed i.e. including blank authorization group customer. It is not restricted to authorization group customer! Why?Kindly check the authorization objects assigned in the user profile. You may ask your basis to help you with the authorization.
-
Authorization Group (BEGRU) search help required in Easy DMS
Hi all,
I had defined some value in authorization group (BEGRU) in SAP. When i opened the Document using CV01N/ CV02N transaction, then F4 help is available to me.
but when i opened the same document via SAP Easy DMS 7.0, Search help functionality is not there.
How could i activate this.
Pls.. Suggest.
Regards,
S AnandHello Sheo,
EasyDMS does not provide search help for Authorization object as of the latest release. The search help achieved by customization of the domain BEGRU does not reflect in EasyDMS.
To achieve this, you can enhance easydms interface by using either easydms plugins or EasyDMS custom tab.
refer:
http://wiki.sdn.sap.com/wiki/display/PLM/EasyDMSPlugin%28Addin%29-Advanced+Development
note: 1355293
Regards
Surjit -
Use of Authorization Group in OB52
Dear Experts,
I have updated Authorization Group as "OB52" in the last column of OB52 T-Code against each posting period variant with account type + , A,D,K,S,M etc with normal period 1 to 12 and special period 13 to 16.
The same Authorization Group "OB52" is updated in one of FI users say Mr X Role profile under authorization object F_BKPF_BUP.
Now as per the SAP standard practice the special period 13-16 should open for the user Mr X and block for all other users. But system is allowing to do transaction with special period 13-16 for other users also.
Please advise where I am wrong.
Regards,
AlokDear,
I will explain you the step involved for auth Mr.X to post for the particular period.
Let take an example that Mr.X has to be allowed to post between the period 1 to 11 and other user only for the period 11(Apr - March as fiscal year).
Now,for valuation variant with account ' +' for the first period, you enter from period as '1' and to period as '10' and in second period, you enter from period '11' and to period '11', provide the auth group (eg KU - key user) in the last column.
For other accounts (A,D,M,K,S) change the first period from '1' to '12' and dont assign any auth group.
Now you goto se16n and check in TBRG table whether your auth group KU is available for the object F_BKPF_BUP,if not maintain it.
The last step is to assign "KU" to Mr.X profile or role against the object F_BKPF_BUP.
Once you made the change"generate" and save it.
Now the system will permit Mr.X to post for the periods between 1 to 11 and other user only for 11 period.
Hope that i am ab;le to clear your boubt.
Do revert for any further assistance.
Take care
God Bless
Regards -
BAPI to create bp with name, search term, address and Authorization Group
Hi
which BAPI could be used to create Business Partner (type organazation) with names, search term, address and the Authorization Group field.
thsHello ,
You can use : BAPI_BUPA_CREATE_FROM_DATA
In case you need to update additional fragments just search in trn code SE37 for BAPI_BUPA_*CREATE.
For example BAPI_BUPA_FRG0040_CREATE - Create classification data for BP , etc'.
Additional you can use XIF :CRMXIF_PARTNER_SAVE to create business partners
Rika -
Dear Friends,
I know I can restrict two user "A" & "B" who create DIR " 1001" & "1002" respectively under same document Type say "DRW". Means they cannot display the DIR created by each other by Authorization Object "C_SIGN_BGR".
I have tried this and works perfect.
But my question is can I maintain these Authorization Groups so that when user enters any wrong Authorization group, it should not allow him to enter in Authorization Group Field.
If I Maintain the setting in SPRO in DMS>Approvals>Define Authorization groups, will my maintained values will be validated with the values I enter in Authorization Group field.
Also I know the developement mentioned under link.
[https://wiki.sdn.sap.com/wiki/display/PLM/F4forAuthorization+group]
But I want to avoid this developement.
Waiting for your reply.
With warm Regards
MangeshHi Mangesh,
To achieve this I suggest you to Update domain BEGRU as mentioned in the link
http://wiki.sdn.sap.com/wiki/display/PLM/UsingAuthorizationGroupfieldin+DMS
values can be maitained in ztable
You can also have search help for BEGRU, by adding search help in DRAW table for BEGRU.
also go through post - Re: Authorization Group in CV01n Document Data tab
Auth object C_DRAW_BGR has field value reference to data element BEGRU
Regards
Surjit -
Hi Experts,
If I have values NPD,R&D etc. for authorization groups. How to maintain these values in SAP DMS? Is there any t-code or spro configuration for maintaining these values? I know it's basis activity.
I hope you understood the question properly, how to set the authorization groups and where to maintain the values for them?
Regards,
RavindraHi,
In DMS auth grp is free field and we can maintain any value for it.
But to control access we must assign these value to auth obj c_DRAW_BGR.
This auth obj will be assigned to role and role to user.
So user who has auth value R&D in his role can enter this auth obj value while creating a dir and at the same time he can access a DIR with this auth obj value created by other user having same auth obj in his role.
Plz note that this auth ob c_Draw_bgr works with other auth obj in DMS.
Regards
Abhijit
Maybe you are looking for
-
My customer has recently upgraded from 2007A PL 42 to 8.81 PL 7. Before upgrade all pricelists are displayed in item code sort order. After upgrade, the sort order seems almost random. Customer maintains 175 different pricelists (mainly supplier pric
-
I phone 5c on the app store update part where it says updates , then purchased not on this device how do i clear it it wont let me delete the history of the apps i bouht on a different i phone but same log in details
-
Using wwctx_api.get_user in dbms_rls policy
We have not been able to succesfully use a call to wwctx_api.get_user in the function we use as a policy for row level security. The package compiles fine. The policy adds fine. When we try to select from the table where the policy is on from portal
-
Me~ear terminates during loipro01 import activity
Hi experts, after having starting our server, the service u201Eme~earu201C terminates approx. two days later. Upon restarting service, the same happens again. This exception occurs during the loipro01 import activity. So we need your help any ideas,
-
Computer not recognizing either my nano or shuffle
I have both the nano 2nd gen and shuffle,neither units are being recognized by my computer,in the same instance my girlfriends 4gb nano works perfectly.I have tried multiple suggestions,installed,uninstalled,reset etc.Could they both be junk?