Remove authorization for Tcode: ME21 and ME22 from certain users

Hi Guys,
I'm new to BASIS.
My requirement is to: Remove authorization to Tcodes ME21/ME22 from a list of users.
How do I acheive this? We run on SAP 4.0B version.
Hoping to get this resolved as soon as possible.
Thanks
SAPUser

dear friend,
1.
run SU01
goto Information-Information system
select node Roles-By Transaction Assignment
type ME21, ME22
execute report
see the roles displayed
2.
then find user who have these roles (usually company uses z-roles copied from standard)
just highlight the role and hit user assignment (Cntrl-Shift-F9)
you see all users who have this role. that means they are able to run these transactions.
3.
let's remove the role(s) we found.
open second session, run SU01 type one of the user , goto Roles tab and delete the particular role you found.
save user and test it (ask hem/her to log in sap and run ME21 and ME22). if needed adjust it again (may be another role to be deleted)
say, fix completely one user/test it and then do the same things for other. test them.
good luck!

Similar Messages

  • How to remove authorizations for a particular transaction

    Hi,
    I have an SAP_ALL authorisation for a user. I need to remove authorization for a particular transaction (FK01) for this particular user.
    How do i make that.

    Hi Marcus ,
    u can remove authorization Objects for a given tcode ,but what i am thinking is SAP_ALL will get ride of this child objects , may be i am wrong.
    But what i am saying is check that are the authorization which are required to run FK01/XK01 and remove them from that Role .
    2.Otherwise check for Object S_Tcode and remove FK01 and XK01.
    Regards
    Prabhu

  • To restrict authorization for tcode MEK1,MEK2,MEK3,MEK4 at plant level.

    Hi,
    We have  a requirement where we need to restrict authorization for tcode MEK1,MEK2,MEK3,MEK4 at plant level.
    Presently we can restrict authorization at Purchasing organization level but not at Plant level.
    Any pointer please!
    Regards,
    Chetan

    First of all, this is not the right forum to post such a question.  Coming to the requirement, this can be achieved by creating a role in PFCG where you can restrict plant and assign this role to each user id.  Your basis team can do this.
    thanks
    G. Lakshmipathi

  • IDOC Type for Tcode CC01 and CC02 (Create / Change Change Numbers)

    We are trying to integrate Change Master from a 3rd party system to SAP R/3 4.72.What is the IDOC Type for Tcode CC01 and CC02 (Create / Change Change Numbers)

    Thanks...
    We have looked at this IDOC Type. However we are not very sure how the components (Material/BOM etc.) will be mapped into E1AEEFM segment in the IDOC.

  • Validation check for Tcode FB10 and FB60 - FICO.

    I have an issue in validation check for Tcode 'FB60' and  'FB10'.
    there are two exits coded for these transactions through transaction 'GGB0'.
    details for the two exits.
    exit 1.
      when posting a vendor invoice, the network status is checked whether it is completed or not - if status is completed error message is raised.
    exit 2.
      when posting vendor invoice - for G/L Account in 60000 - 69999 series network should not be posted. if posted error message is raised.
    when these two exits are entered via a prerequisites in code 'KGB' a code is generated automatically to call these exits- when transaction 'FB10' 'FB60' is executed.
    Issue:
    for  code 'FB10' is executed with network with status completed and with G/LP account in 60000 - 69999 series -
    error message is raised in sequence i.e. exit 1 is raised and then exit 2 is raised.
    but for code 'FB60' if condition for exit 2 is  not satisfied then exit 1 message is raised.
    but it should be in sequence in raising the error message i.e. exit 1 and then exit.
    Even though for both the transaction the auto generated code is similar and even exits are similar - but it is execution in raising the error message is diffrent.
    - Since it is auto generated code i am able to figure out the issue.
    i would appreciate if any one could help me out in this issue.
    thank you,
    with dregs,
    Karthik.

    Hi,
    I have tried what you have suggested. But still validation is not working
    I have done the following validation based on your inputs.
    Prerequisite
    Company Code = '1265' AND Transaction code = 'FB60' AND
    Account Type = 'K' OR
    Transaction code = 'F-43' AND Account Type = 'K' OR
    Transaction code = 'F-48' AND Account Type = 'K'
    Check
    Business Place > '' AND Business Place = Section Code
    Message
    E - Error Message
    Still it is not working.
    Please suggest.
    Best Regards
    Shashikanth.M

  • Apple TV for watching photos and videos from IMAC

    I am considering purchasing Apple TV 40GB for streaming photos and videos from my IMAC to TV on demand. Is that use case supported well by Apple TV or they are secondary and watching movies and TV shows from Itunes library are the primary use cases? I looked up Apple's page on Apple TV but it does not even talk about watching home videos using Apple TV.
    Through posts on this forum and other places, I found that I would have to "export" video in either large or medium format. The question is how is the quality of watching that video using ATV over wireless N network?
    Related question is how good is ATV's video card?
    Is this a common use cases many people use ATV for? I have recorded lot of videos using Sony mini-DV camcorder but don't end up watching because creating DVD and keeping organized DVD library is a cumbersome process.
    The other question I have is about usability of Apple remote. I don't have Iphone or Ipod touch with the remote app. Is the Apple remote good enough for playing videos, photos and occassionaly music?
    Thanks in advance,
    DJ

    dj2008 wrote:
    Thanks. A couple of follow-up questions:
    1) All I need to do to stream is to have Itunes running, right? In other words, I don't need to go to IMAC to initiate streaming. Is there a way to wake up the IMAC if it is in standby mode?
    You need imac running with itunes open, and both it an AppleTV connected to the local network.
    I don't think it'll work with computer in standby mode.
    2) I am planning to use Imovie's built-in export function. Is that good enough or do I need other softwares mentioned here (MPEGStreamclip or Handbrake)? Where do I get these softwares? Are they significantly better than Imovie's export function?
    Both are free one from squared5.com, the other you can Google. iMovie's output may well be fine, but I have found in the past that standard export settings didn't give me best results and better could be achieved either using custom export settings from iMovie or using other apps, some of which can be a bit quicker. You will also be able to use the Handbrake app to make Appletv compatible video of your home made non-commercial DVDs (without menus).
    Quality is pretty much in the eye of the beholder so if imovie does the job no reason not to use it.
    3) I have noticed that video quality on my IMAC is not as good as that of same video on DVD created using iDVD. Have 50 inch Plasma TV with up-conversion DVD player. Maybe the graphics card of my IMAC is not as good. I am bringing this up because someone mentioned that quality of video using ATV would be as good as the one seen on IMAC.
    Any upscaling done on the DVD player is altering the original content to give a potentially more pleasing image though not adding any real information.
    The DVD is likely to be of lower quality (though perhaps barely perceptible if conversion is good) than your source video on the iMac, and any differences are likely to be down to the DVD player vs software playback on the iMac, coupled potentially with scaling and frame interpolation on the TV depending on how the set processes incoming video.
    I think it's impossible to say how you'd find AppleTV compared to DVD for playback of your home video though I think the majority of people are more than happy when things have been encoded well.

  • TS3274 My ipad 2 charges very, very slow. It was on the charger for 7 hours and went from 41% charged to 77% charged.

    My ipad 2 is charging very, very slow. Is was on the charger for 7 hours and went from 41% to 77%. I have tried several different charger, even purchased a new charger. What could the problem be?

    Could be your battery needs replacing.
    First thing to try is to reset your device. Press and hold the Home and Sleep buttons simultaneously ignoring the red slider should one appear until the Apple logo appears. Let go of the buttons and let the device restart. See if that fixes your problem.

  • System Status Authorizations for Marketing Plans and Campaigns

    Hi Experts,
    We are using the Standard System Statuses on the Marketing Planner like the Created , Released, Approved, Finished, Locked and Rejected. My requirement is to limit the access to the Users for these Statuses. For Example :
    User 1 will have access to Created.
    User 2 will have access to Aproved.
    User 3 will have access to Aproved,Released, Create
    How do I set the Authorizations for the System status based on the User? I tried creating Authorization Keys under Status Profiles, but I am not clear on where to assign them.
    Please guide me.
    Thanks in Advance.

    Hi ,
    Thanks for your input. I am planning to go with your second option to go with assigning the Authorization objects at the Marketing Plan and also at the Campaign level . My only concern here is will we be able to assign status specific authorizations here ?
    The Authorization objects given are for change, create etc. There are no status specific authorization  objects mentioned.   My requirement is the person who creates the MP should have access to release it and only the approver should be able to see the approved status and change the status o approved.
    Do you suggest using Authorization keys and assigning them ?If so where do we define the restictions on the Authorization keys like
    Authorization Group 1 has authorization to Create , modify  a MP and can only   View / Change the  statuses to Create and Release.
    Authorization Group 2 has access to Modify and has access to change the  statuses to Aproved.
    Is there any way this can be achieved ? Please let me know if I am going in the right direction.
    Regards,
    Pooja

  • User Exit for TCode CJ20N to populate Project system user fields

    Hi team,
    need one support from your side..
    I am looking for User Exit for TCode CJ20N to populate Project system user fields on SAVE.
    I have found
    Enhancement        CNEX0001
    Short text         PS: User field
    which is exactly suiting my req...as it has USER Fields (USR08/USR09 )in export paramters..
    BUT it is not triggering on SAVE,,
    Any hint or is any other user exit/badi which have USER Fields in export paramters.
    Warm Regards
    Krishan

    Hi Krishnan,
    If you want a custom tab that contains User defined fields at Project level then you have to use CNEX0006 user exit. Before this you must declare your fields using the CI include CI_PROJ in the PROJ table.
    If you want a custom tab that contains User defined fields at WBS level then you have to use CNEX0007 user exit. Before this you must declare your fields using the CI include CI_PRPS in the PROJ table.
    In the PBO function module exit of these exits you must use the following statements as the first statement.
    MOVE-CORRESPONDING sap_proj_imp TO proj.
    MOVE-CORRESPONDING sap_prps_imp TO prps.
    In the PAI function module exit of these exits you must use the following statement as the last statement.
    MOVE-CORRESPONDING proj TO cnci_proj_exp.
    MOVE-CORRESPONDING prps TO cnci_prps_exp.
    The remaining programming as in the case any Screen Exit.
    Regards,
    Abijith

  • How do I transfer files and documents from one user account to another?

    How do I transfer documents and files from one user account to another?

    You haven't understood me. Follow these steps:
    1. Log in the user where are the files you want to transfer, and open a Finder window.
    2. In Finder, select Go menu (on the menu bar) > Go to Folder, and type /Users/Shared. Now you're on Shared folder, so leave that window.
    3. Open a new Finder window without closing the old one, go to the folder with the files you want to transfer, and copy them to Shared folder.
    4. After copying the files to Shared folder, go to  > Log Out, and log in the other user.
    5. Repeat the step 2, and you will get access to the transferred files. Now, you can open them directly from this folder, or you can copy them to a folder on your user folder

  • HT4878 How do i share my pictures, music and videos from one user to another on the same computer?

    How do i share my pictures, music and videos from one user to another on the same computer?

    lots of ways... you could use a thumb drive, you could drag files to the users public folder drop box, you could send it through email, you could use the internet servic called drop box (not to be confused with Apple's user public foldelr drop box).

  • Authorizations for Tcode Execution

    Hi. 
    I understand that users assigned a particular Tcode eg. PFCG might not be able to execute this Tcode if he is not assigned the corresponding Authorization object and related activity field values for the PFCG transaction to work.
    One tedious method of verifying that the user does indeed have authorization is to require the user to login and execute the transaction PFCG itself.
    Is there a faster way for the Administrator to check if the end-users does have the relevant authorizations/authorization_objects to support the execution of a tcode PFCG? This applies to all other tcodes.
    Thank you very much.

    Hi Chong,
    SAP delivers the tables USOBX and USOBT.
    Table USOBX defines which authorization checks are to be performed within a
    transaction and which not. This table also determines which authorization checks are maintained in the Profile Generator.
    Table USOBT defines for each transaction and for each authorization object which
    default values an authorization created from the authorization object should have
    in the Profile Generator.
    The tables are maintained in transaction <b>SU24</b>. This transaction displays the check indicators of a transaction. Check indicators determine if an authorization check will run within the transaction or not. Any object with CM(Check/Maintain) status will be pulled into PFCG when you add a transaction.
    To check this:
    Enter transaction SU24-->Enter any transaction which you want to check in "Transaction Code"->execute->Display check indicator-->Display field values.
    This would show you the authorzation objects along with there field values which will be pulled into a role when you add a transaction.
    Hope it helps.
    Please award points if it is useful.
    Thanks & Regards,
    Santosh

  • User exit for tcode ME21N and ME22N

    Hi everyone
    Can anybody tell me the user exits found in the tcodes ME21N nad ME22N, when saving a PO?
    Regards
    Anjali

    AMPL0001            User subscreen for additional data on AMPL
    LMEDR001            Enhancements to print program
    LMELA002            Adopt batch no. from shipping notification when posting a GR
    LMELA010            Inbound shipping notification: Transfer item data from IDOC
    LMEQR001            User exit for source determination
    LMEXF001            Conditions in Purchasing Documents Without Invoice Receipt
    LWSUS001            Individual customer source determination in Retail
    M06B0001            Role determination for purchase requisition release
    M06B0002            Changes to comm. structure for purchase requisition release
    M06B0003            Number range and document number
    M06B0004            Number range and document number
    M06B0005            Changes to comm. structure for overall release of requisn.
    M06E0004            Changes to communication structure for release purch. doc.
    M06E0005            Role determination for release of purchasing documents
    ME590001            Grouping of requsitions for PO split in ME59
    MEETA001            Define schedule line type (backlog, immed. req., preview)
    MEFLD004            Determine earliest delivery date f. check w. GR (only PO)
    MELAB001            Gen. forecast delivery schedules: Transfer schedule implem.
    MEVME001            WE default quantity calc. and over/ underdelivery tolerance
    MM06E001            User exits for EDI inbound and outbound purchasing documents
    MM06E003            Number range and document number
    MM06E004            Control import data screens in purchase order
    MM06E005            Customer fields in purchasing document
    MM06E007            Change document for requisitions upon conversion into PO
    MM06E008            Monitoring of contr. target value in case of release orders
    MM06E009            Relevant texts for "Texts exist" indicator
    MM06E010            Field selection for vendor address
    MMAL0001            ALE source list distribution: Outbound processing
    MMAL0002            ALE source list distribution: Inbound processing
    MMAL0003            ALE purcasing info record distribution: Outbound processing
    MMAL0004            ALE purchasing info record distribution: Inbound processing
    MMDA0001            Default delivery addresses
    MMFAB001            User exit for generation of release order
    MRFLB001            Control Items for Contract Release Order
    MEQUERY1            Enhancement to Document Overview ME21N/ME51N
    MM06E011            Activate PReq Block
    LMEKO001            Extend communications structure KOMK for pricing
    LMEKO002            Extend communications structure KOMP for pricing
    If useful reward.
    Vasanth

  • Authorization for all the maintenance views from one table

    I have one table with data related to 5 systems.
    I have created views with related data for each system.
    These all are from one table only. while i am editing in one view, i must be able to edit the another view also. at a time 2 users cant edit the same view but at a time two users have to edit two different viws from same table.
    I have to provide all authorization to all views at the same time.How to achieve this?.
    Thanks.
    Edited by: pagidala Ramesh on Oct 27, 2008 10:52 AM

    Hi Pagidala,
    This is my idea how much it can help you i am not sure but, create txcode for views and assign the authorizations for the txcodes according to your requirements. May be your issue will resolve.
    Cheers!!
    VEnk@

  • Removing  authorization for SPRO transaction

    Hi experts,
      I am working on ECC 6.0 and MSSQL Server. How to get the authorization object for Tcode SPRO. i have tried to find it out through SE80 but could not get the authorization object. I have mistakenly added object related to SPRO tcode. and user got the authorization to log in to SPRO.  Now i tried to find out in all roles assigned to him but could not get SPRO tcode in his menu but still he is able to perform SPRO. Please suggest as i have made temporary adjustment by locking the SPRO tcode.

    Hi Vaibhav,
    Not sure if you already resolve the issue , but you can give only SPRO display authorization as follows .
    There is an SAP Note 46546 please follow that note
    You can go to the Role for which you want to give only SPRO Display
    click on Manually tab and give this authorization object S_TABU_DIS and give only display
    This should solve your problem.
    Regards,
    Ershad Ahmed

Maybe you are looking for