Regarding Providing Authorisation

I have created a new user under the organisational unit. Created a new service and assigned that particular user to approve or reject a service. But under my services authorisation tab,created service is not getting displayed to approve or reject.
Can u please tell me the procedure how to approve the service , when the user submits the order

Parvin, is this within context of IAC 3.1 extensible authorizations (approvals)? Or are you asking from a generic approach of creating a new service outside of the IAC packages/solution?

Similar Messages

Regarding Provide endprovide

Hi,
I am using PNP ldb as we know that we will get a standard selection screen by using pnp and I have to add 4 extra fields to the existing selection screen then I have created by using select-options in the program.
Now my question is .. Can we skip the standard selection screen .
I hope u got.
Regards
Anil

Hi
PROVIDE
PROVIDE FIELDS {*|{comp1 comp2 ...}}
               FROM itab1 INTO wa1 VALID flag1
               BOUNDS intliml1 AND intlimu1
               [WHERE log_exp1]
             FIELDS {*|{comp1 comp2 ...}}
               FROM itab2 INTO wa2 VALID flag2
               BOUNDS intliml2 AND intlimu2
               [WHERE log_exp2]
        BETWEEN extliml AND extlimu
        [INCLUDING GAPS].
ENDPROVIDE.
The statements PROVIDE and ENDPROVIDE define a loop through a statement block. In this loop, any number of internal tables itab1 itab2 ... are processed together. A single table can appear several times. For every table itab you must specify a FIELDS clause. After FIELDS you must specify the character * for all components or a list comp1 comp2 ... for specific components of the relevant table. The names of the components comp1 comp2 ... can only be specified directly.
To be able to process internal tables using PROVIDE, all tables itab1 itab2 ... must be fully typed index tables and contain two special columns that have the same data type (d, i, n, or t) for all relevant tables. For every table you must specify the names intliml1 intliml2 ... and intlimu1 intlimu2 ... of these columns using the addition BOUNDS.
The columns intliml1 intliml2 ... and intlimu1 intlimu2 ... in every row of the relevant internal tables must contain values that can be interpreted as limits of closed intervals. Within a table, the intervals specified in these columns must not overlap and must be sorted in ascending order. The intervals therefore make up a unique key for every row.
For every table you must specify a work area wa1 wa2 ... compatible with the row type and a variable flag1 flag2 ..., for which a character-type data type with length 1 is expected. In the PROVIDE loop, the components specified after FIELDS are filled with values in the relevant work areas wa1 wa2 ... for every specified internal table. The variables flag1 flag2 ... are also filled. A work area wa1 wa2 ... or a variable flag1 flag2 ... cannot be specified more than once.
With the BETWEEN addition you must specify an interval extliml, extlimu. It must be possible to convert the data objects extliml and extlimu into the data types of the respective columns intliml1 intliml2 ... and intlimu1 intlimu2 ... of the individual tables.
The interval limits intliml1 intliml2 ... and intlimu1 intlim2 for every row of all relevant internal tables itab1 itab2 ... that are within the closed interval made up by extliml and extlimu divide the latter into new intervals and every interval limit closes one interval in the original direction. If, within a relevant table, a lower interval limit follows an upper interval limit with no space or gap between them and the components of the corresponding rows specified after FIELDS have the same content, the two intervals are combined and the corresponding interval limits intliml1 intliml2 ... and intlimu1 intlimu2 ... are ignored for the new intervals.
For every interval that is created in such a way and overlaps with at least one of the intervals of a table involved, the PROVIDE loop is passed once. The components of every work area wa1 wa2 ... specified after FIELDS and the variables flag1 flag2 ... are filled with values as follows:
The components intliml1 intliml2 ... and intlimu1 intlimu2 ... of every work area wa1 wa2 ... are filled with the interval limits of the current interval.
If the current interval overlaps with one of the intervals of an involved table, the remaining components of the corresponding work area are assigned the contents of the relevant components of this table row and the variable flag1 flag2 ... is set to the value "X". Otherwise, the work area components and the variables flag1 flag2 ... are set to their Initial value.
Except for intliml1 intliml2 ... and intlimu1 intlimu2 ..., the components not specified after FIELDS are always set to their initial value. The components intliml1 intliml2 ... and intlimu1 intlimu2 ... are always assigned.
The ABAP runtime environment checks for every table involved, whether the condition of sorted and non-overlapping intervals is met within the interval made up by extliml and extlimu and, if necessary, triggers an exception that can be handled.
If the INCLUDING GAPS addition is specified, the system passes the PROVIDE loop for every interval, that is also when the current interval does not overlap with at least one of the intervals of an involved table. In the latter case, the variable flag is of initial value for every relevant table.
You can use the WHERE addition to specify a condition for every table itab1 itab2 ... involved. After WHERE, you can specify any logical expression log_exp1 log_exp2 ... ; the first operand of every comparison must be a component of the internal table. As such, all logical expressions except for IS ASSIGNED, IS REQUESTED, and IS SUPPLIED are possible. You can only specify components that are in the list after FIELDS. Here it is not possible to specify a component using character-type data objects in brackets. The table entries for which the condition is not met are ignored by the PROVIDE loop. You can leave the PROVIDE loop following the instructions in the section Leaving loops.
<b>System fields</b>
The system fields sy-subrc and sy-tabix are set to the value 0 before every loop pass and at ENDPROVIDE. Only if the loop is not passed once, is sy-subrc set to 4 at ENDPROVIDE.
The relevant internal tables should not be modified in the PROVIDE loop.
The WHERE condition can be used to remove overlaps between the tables involved or to ensure the sorting of the intervals.
In two tables itab1 and itab2, the respective columns col1 and col2 are interval limits of type i. The filling of the internal tables results in the following intervals (rows two and three):
The interval specified in the BETWEEN addition to the PROVIDE statement is shown in the fourth row. It serves as a basis for the five intervals in the fifth row represented by i1 to i5. These can be processed in the PROVIDE loop.
Because each of the five intervals overlaps with one of the intervals from rows two and three, the PROVIDE loop is passed five times.
Only the component col3 of wa1 is filled in the first pass, only the component col3 of wa2 in the third pass, and the components col3 of both work areas in the second and fourth passes. The fields valid1 and valid2 are set accordingly.
DATA: BEGIN OF wa1,
        col1 TYPE i,
        col2 TYPE i,
        col3 TYPE string,
      END OF wa1.
DATA: BEGIN OF wa2,
        col1 TYPE i,
        col2 TYPE i,
        col3 TYPE string,
      END OF wa2.
DATA: itab1 LIKE STANDARD TABLE OF wa1,
      itab2 LIKE STANDARD TABLE OF wa2.
DATA: flag1(1) TYPE c,
      flag2(1) TYPE c.
wa1-col1 = 1.
wa1-col2 = 6.
wa1-col3 = 'Itab1 Int1'.
APPEND wa1 TO itab1.
wa1-col1 = 9.
wa1-col2 = 12.
wa1-col3 = 'Itab1 Int2'.
APPEND wa1 TO itab1.
wa2-col1 = 4.
wa2-col2 = 11.
wa2-col3 = 'Itab2 Int1'.
PROVIDE FIELDS col3 FROM itab1 INTO wa1
                               VALID flag1
                               BOUNDS col1 AND col2
        FIELDS col3 FROM itab2 INTO wa2
                               VALID flag2
                               BOUNDS col1 AND col2
        BETWEEN 2 AND 14.
WRITE: / wa1-col1, wa1-col2, wa1-col3, flag1.
WRITE: / wa2-col1, wa2-col2, wa2-col3, flag2.
SKIP.
ENDPROVIDE.
The list output is as follows:
   2           3 Itab1 Int1 X
   2           3
   4           6 Itab1 Int1 X
   4           6 Itab2 Int1 X
   7           8
   7           8 Itab2 Int1 X
   9          11 Itab1 Int2 X
   9          11 Itab2 Int1 X
12          12 Itab1 Int2 X
12          12
<b>REWARD IF USEFULL</b>

Regarding provide

Hi,
I am selecting some fields from infotype by using provide.
like ..
provide aedtm
           ename
           plans
           orgeh
           kostl from p0001 between pn-begda and pn-endda.
when I am writing where condition the data will be printing with zero's.
          where p0001-aedtm le p_aedtm.
why it is giving I am not getting.
please guide me how to follow.
Regards
Anil

Hi Anil
See the below code. Also make sure you have data in infotype PA0001 and the LDB 'PNP' is included in your program.
TABLES pernr.
INFOTYPES: 0001.
GET PERNR.
provide aedtm
ename
plans
orgeh
kostl from p0001 between pn-begda and pn-endda
where p0001-aedtm le sy-datum.
write:/
    p0001-aedtm,
    p0001-ename,
    p0001-plans,
    p0001-orgeh,
    p0001-kostl.
endprovide.

Regarding Role Authorisation and Obejcts

Hello Experts,
I have requirement from the basis team they want to know the object names for the particular transaction like MMBE and also they have request that they want to restrict to view the stock for plant 1000 for particular user, so they need the Object for Transaction and Object for the Plant to restrict how can I find it? Please it is urgent
Can you give me list of T.Code to Check User Authorisatiosn and Obects for the Particular Transaction code.
Regards,
Sundu

Hi Sunder,
You can use PFCG tcode to check the object of particular transaction code.
Execute PFCG and create temp role. Enter tcode in Menu and go to Authorization and click Change authorization profile and here you will get all the object related to that tcode.
Hope this will help.
-Pinkle

Authorisation object to the loading point

Hi, Experts,
As per the requirement we have configured the Weigh Bridges as loading points from where the TRUCK empty and Gross weights can be taken to create the delivery and these loading points were assigned to multiple shipping points. Again each Shipping point also assigned to multiple loading points.each weigh bridge i.e. the loading point is being operated by the end user.As the shipping point is assigned to multiple loading points, system is allowing the user to select any one of the loading point assigned to that shipping point.
Now, my requirement is to restrict the end user to operate one loading point only by providing authorisation object for that loading point. what is the authorisation object for the loading point.
Regards
Sam

the loading point is being operated by the end user
Through which transaction code, users are executing this loading point. I think, the authorization object for this is L_YRD_MTHD
G. Lakshmipathi

HT4527 How do I authorise an ipad

How do I authorise my iPad to home share music as store does not provide authorise command

Perhaps the information here will help:
http://www.apple.com/support/homesharing/
Regards.

How to provide access to Critical Transactions in GRC AC 10.0

+Hello Gurus,+
+We are in phase of implementing GRC AC 10.0 , and have a requirement where there are "Critical Transactions" identified by the Business and if there is any end user who wants to access any specific "Critical Transaction" e.g. PA30 etc then it must automatically go to a specific Owner of that transaction.+
+As far as i know , we can have a workflow for getting a role assigned, but not sure if it is possible to have a workflow where every "critical transaction" will have an owner and then on selection of the transaction it will trigger a workflow.+
+I would also like to know what is a standard or rather best practice in SAP GRC , regarding providing access to "CRITICAL Transactions" ??+
+We thought of creating a role containing multiple "Critical transactions" and then assigning to the firefighter ID , for which we have an approval workflow !! But that does not help , as assigning the role will give user access to some other "critical transactions" as well which we would like to control.+
+Looking forward to know about the suggestion/solution for this issue.+
+Thanks in advance.+
+Regards,+
+Victor+

Hello,
Victor Ger wrote:
> +We thought of creating a role containing multiple "Critical transactions" and then assigning to the firefighter ID , for which we have an approval workflow !! But that does not help , as assigning the role will give user access to some other "critical transactions" as well which we would like to control.+
> +Victor+
I think that only one firefighter with all the critical transactions is not a good idea. I guess it's better to have different firefighters IDs assigned to different users. The point here is to decide if you really want to have a trace for all critical transactions executions.
An example:
Tx. SM37 is considered a critical transaction if the user has also the auth. object S_BTCH_ADM set to "yes". This allows to delete or copy others user's jobs. This is and authorization that a Basis person must have. Do you really want to trace this?
I think that force a Basis person to use a firefighter for this is nonsense, because this tx. is part of his/her job. Then, you should accept this sort of risks, otherwise you'll get the point where you replace the normal users with FF users. This is not the idea of FF.
Of course, this is just a thought and all depends on your business requirements.
Cheers,
Diego.

Incoming Payment Draft authorisation

Dear all,
How do you give authorisation to a user to see the payment drafts created by other user?
the scenario is users at branches creates incoming payment drafts and user at head office will see them and approves / add them to SAP after verification.
Your response is much apriciated.
thanks
SVReddy

HI
AS a superuser just goto administration->System initialisation->Authorisation->General Authorisation.
IN General Authorisation,select the appropriate user and at the Right hand side,Select Banking-.Outgoing Payments->Payment drafts.
In that,provide AUthorisation as per ur requirements.
Please mind that,You cannot set Approval for incoming payments.
Hope this will help you....

Authorisation weblogic resources

Hi,
I'm trying to create a security provider (authorisation) for a web service generated from a EJB. To be able to do the authorisation I want to have access to the method parameters passed by the client. Is this possible to do this or do I have to handle the security at application level?
THX

First, wehn u deploy your application, u will have to select the Deploy Model as custom roles and custom policies.
After deployment, u need to go to ur application's security configuration and specify the roles and policies.
I will try to prepare and article on it with screenshots and post it on our website
-Faisal
http://weblogic-wonders.com

Analysis Authorisations

Hi,
Query regarding Analysis Authorisation.....
I had a 3 Queries based on a Multiprovider which is a combination of 10 Info Cubes....
Where do i need to implement my authorisation on Multiprovider level or at the cube level..as data is avaliable in cube
Thanks

Hi there,
You need at MultiProvider level.
Assign points if helpfull.
Diogo.

BW Authorisations

Alright guys,
Was wondering if anyone had come across the function module 'RH_GET_MANAGER_ASSIGNMENT' with regards to authorisations with BW. The R3 guys will be using this function moduke to create/identify the R3 Authorisations for MSS - is there any way we could use this in BW authorisations? I don't want to go down the route of creating hundreds of different authorisations with regard to HR Reporting in MSS.
Thanks in advance,
Scott Sweeney.

Hi Scott,
It is possible to generate the HR Authorisations:
http://help.sap.com/saphelp_nw04/helpdata/en/56/25dc886b0611d5b2f50050da4c74dc/content.htm
Would this be useful to you...

URGENT removing other authorised bt accounts from ...

Hi,
I have noticed that another person has been added to my bt account without my authorisation.
They have set up a bt login using my account number.
How do I get this person removed as I did not provide authorisation and therefore they will have access to my bills!
Please help!

Hi lauren2390,
Thanks for posting. I can look into this for you.
Click on my username and under the "about me" section you will the link to get in touch with us. Whenever we receive your details we will go from there.
Cheers,
OlgaC
BTCare Community Mod
If we have asked you to email us with your details, please make sure you are logged in to the forum, otherwise you will not be able to see our ‘Contact Us’ link within our profiles.
We are sorry that we are unable to deal with service/account queries via the private message(PM) function so please don't PM your account info, we need to deal with this via our email account :-)
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

Vendor master authorisation.

Hi,
We have a requirement to block the access of screen "Payment Transactions" while creating or changing vendor for certain users. Is it possible to provide authorisation to users for Changing & Creating vendor without "Payment Transactions" screen?
Suggest a suitable solution.
Shripad

Hi,
I am not totally sure what you want. if you don't want some users to
see the Bank details in FK03/XK03 I have got this info from our data-
base about this issue:
I
f a user does not have authorization on the following objects, bank
data will not be displayed using transaction FK03:
F_LFA1_BEK
F_LFA1_GRP
F_LFA1_APP
F_LFA1_GEN
There is no distinction within the configuration of 'General data':
- Address
- Control
- Payment Transactions (which includes the "Bank details" fields)
from the authorization point of view."
you can protect all general data (i.e. address data, payment transaction
data, ...) with the authorization object F_LFA1_GEN. However, it is not
possible to protect only bank data using authorization objects.
You can suppress bank data in FK03 within your customizing (transaction
OB23). However, in this case, your FK01 and FK02 users cannot see bank
data neither if they use transaction FK03.

How to authorize a transaction code for a user?

Hello,
How can I authorize the user for a specific transaction code and how can I block it?
I would appreciate if you can give some insight.
Thank you.
Hakan

Hi Hakan,
We can achieve this by using two T.Code SU01 and SUIM.
First check in SUIM,the T.Code that you want to block T.Code is belongs to which role.
For finding it Click on roles.Click on transaction assignment.Enter your T.code and execute.
After finding this goto SU01 and unassign that role for that user.
In this way we can block the user to use one particular T.Code.
For providing authorisation,add the role to the user id in SU01 T.Code.
Run SU53 T.Code after running the failure T.Code to know all the errors.
Please contact your BASIS person for all these.
Regards,
Krishna.

WO & Service Entry sheet amendment

HI,
If WO & Service entry sheet creation & amendment is authorised to two user on same level & requirement is that WO/service entry sheet should not be amended by another until & unless permission how can we put restriction in SAP?

hi,
provide authorisations to those users...via activating the authorisation management...
Regards
Priyanka.P

Regarding Providing Authorisation

Similar Messages

Maybe you are looking for