Restrict all ECC6 roles on Comp Code / Plant restrictions

Hi
thanks for your time and trying to help in advance
we have a requriement where we need to restrict all roles in ECC6 to a combination of Comp Code & plant to which they belong with few exceptions
we dont want to go the route of derived roles due to huge maintennace , are there any custom developments options where in we can restrict based on an user exit or create a custom table and check with the user runs a bunch of tcodes ( problem is its not just one as in ECC6 we need this restriction for large number of tcodes and multiple roles
is it worth looking at any options ?
thanks

Hi,
Do the job with derived roles.  This will save considerable time and expense over trying something like dynamically entering CC/Plant into an auth check as it would involve modifying hundreds of SAP programs (as you have already identified).
If you suddenly have a new restriction requirement then your company/client need to accept that there will be an overhead for the change.
One method that may be mentioned is "value roles" or "enabler roles" (if you use the search for term = enabler, you will get some info), but while they may slightly reduce time to implement these, the ongoing support will be increased and there is a high potential to leave your build in tatters.

Similar Messages

  • Urgent : Down load all vendor with comp code

    Hi Techis ,
    i want to download all vendor with company code ..is it possble thru bdc download ..
    pls give me the steps for it or any other method ro download all vendors with comp code..
    Rewards for every helpful answer.
    Regards
    Santosh

    If you want to step by step process for download
    1. Go to SE11
    2. open LFB1 table
    3. press ctrlshiftF10
    4. Goto Settings -> Formate list  -> choose fields -> select LIFNR, BUKRS
    5. Change maximum hits
    6. execute
    7. press ctrlshiftF9
    8. Select what ever you want the formate for download
    9. Give file path
    10. press Generate
    Plzz Reward if it is useful,
    Mahi.

  • Purchase order (Company code - Plant)

    Hi All,
    In the Org. Data tab of Purch. Order header, i enter the company code. This company code has 2 plants associated with it. But in the item details, where i enter the plant, when i click F4, i see 4 plants. I would like to know how i can restrict this to display only the plants associated with the company code entered in header. Hope my question is clear.
    Vivek

    Hi Vivek!
    Whatever Krishna / Rama krishna said is correct.
    In General practice of creating P.O, once you enter the Org. data in header, without pressing "Enter", you use to enter the data in Item over view. That time, if you go to F4 at plant column, all the plants created will be displayed.
    To avoid this, after entering Org. data i.e., Pur. org., Pur. group, and Comp.code, immediately you press"Enter".
    Then go to Item overview and press F4, for plant. You will find only the plants that are assigned to the purchasing org. you enterd in header.
    One more thing is - Pur. group is not assigned to any org. element.
    Regards,
    Gopi Chand.

  • Generate 463 Roles from T-Code : SUPC

    Hello,
    I am trying to generate 463 Roles in T-Code: SUPC we are not able to generate. Below are my options that i used to generate in SUPC
    1. Click on radio button 4 & upload all roles & tick mark on Generate Automatically &  Execute.Select all & execute.But Only 158 Profiles are generated.Why?
    2. Click on radio button 3 & upload all roles & tick mark on Generate Automatically &  Execute.Select all is greyed out & not able to execute.Why?
    Is there any abap Code problem at the background?
    How can i execute SUPC for all 463 Roles in Dev system?
    In SE03 the Software components in which the SAP_Basis component is Restricted Modifiable is set.
    My system is ECC5.
    Please suggest
    Vijay

    Hi,
    You might doesn't have authorization to generate profiles for some of the roles such as Z etc., Check your authorizations. You will need the following authorizations to use Transaction SUPC:
    ·        User master maintenance: Authorization Profile (S_USER_PRO)
    ·        User master maintenance: Authorizations (S_USER_AUT)
    ·        Authorization system: Check for roles (S_USER_AGR)
    S_USER_AGR should have a * value, so that it allows you to generate profiles for all the roles. If still you have the same issue, goto SU53 and see what is missing.
    Rgds,
    Raghu Boddu

  • DEFINING AND ASSIGNING COMP CODE

    Hi,
    I have a bit of a problem. I need to define and assign the following:
    --COMP CODE
    --CONTROLLING AREA
    --PURCHASE ORG
    --SALES ORG
    --PLANTS
    --CHARTS OF ACCOUNTS
    Need help in finding out where and how do i go to perform the above. I understand its a novice question but any help would be greatly helpful. I already have a company code to work with.

    Hi,
    Each user can set their own defaults to most if not all of the fields you mention, by setting the corresponding Parameter ID against their own user profile.
    Once set, the correct default values will be then be populated correctly trhoughout each transaction ans screen that displays them.
    To define default values in a user master record:
    From within SAPgui:
    Select System > User defaults > Personal data.
    The Maintain individual user defaults screen appears.
    Choose the Parameter tab page.
    Enter the parameter ID and the parameter value:
    From memory the Parameter ID for Company Code might be BKR (but I am not sure)
    Save your settings.
    Cheers, Phil G.
    Message was edited by:
            Phil Gleadhill

  • One cheque for multiple vendors in diff comp codes

    Good day all
    My client wants to pay multiple vendors in multipe company codes with one cheque.
    Ex.1.  Vendor 123 in Comp code 1
              Vendor 555 in Comp code 2
              Vendor 789 in Comp code 3
              Must all be paid with one cheque to Vendor 987 in Comp code 1.
    OR
    2. Vendor 123 in Comp 1
        Vendor 123 in Comp 2
        Vendor 123 in Comp 3
        Must all be paid with one cheque to Vendor 123 in Comp code 1.
    Only ONE cheque in both cases must be created.
    Is this at all possible with F110, check payments?
    Any advice or ideas would be greatly appreciated.
    Regards
    Louise

    HI,
    Do vendor transfer posting from one to another company code that transfer remaining two vendors to one main vendor through cross company transaction and then clear the open items of remaining two vendors. And run F110 for Main vendor to whom who want to print cheque.

  • To limit the access of PM data based on the Company Code, Plant & Location

    Hi Experts,
             I have a requirement . Customer wants to Restrict the access of PM data for a user based on the company code,
    Plant & Location.
    Say user : XYZ
    Plant :1000
    CCODE:1000
    Location:0001
    So you can see data of only this Organisation structure .No other data will be visible to him.
    I know we can do it using authorisation object
    Can you Suggest me how can we do this.
    Regards,
    Amar

    Hi,
    You can achieve this by maitaing these values in user authrisations. If you want more info about the objects check SU22 t code under PM.
    For Plant              I_IWERK
    For Location       I_ILOA
    Regards,
    N.Nagaraju

  • Determination of default characteristics values based on Company Code/Plant

    Hi All,
    We are using batch management and classification.  We have defined various Characteristics and maintained values for it.
    As per our business process, we create Purchase Order (which may contain many line items) and after that we receive the Goods thru MIGO.
    At the time of MIGO user need to enter all the Characteristics of the batch. Out of no. of characteristics few are mandatory and also have got same value (depends on Company Code/Plant).
    Currently there is no provision to maintain default values of the characteristics at Company Code / Plant level. Due to this user have to maintain same values again and again at the time of MIGO for each line item/batch. So please suggest us the solution where user need not to enter same values for respective characteristics during MIGO and we can save lot of time and it will help to improve the efficiency.
    We also tried to explore the provision of making u201CDefault Valueu201D in CT04, but then that value was getting applied for all the Company Code / Plant which we donu2019t want.
    Regards
    Nilesh

    you have to valuate the characteristics with  Object Dependencies
    http://help.sap.com/saphelp_bw/helpdata/en/24/4766d4416711d189ec0000e81ddfac/frameset.htm

  • F110 - No bank can be selected for comp code 8888 payment pethod C cur USD

    Dear All Experts,
    I am running F110 program, while doing getting this error
    *No bank can be selected for comp code 8888 payment pethod C cur USD*
    I have configured the FBZP section with possible all entries as follows :-
    1 ) Payment Method in country - Currencies Allowed is blank - Means all aplicable.
    2 ) Payment method company code data :- Forign currencies allowed option is Ticked.
    3 ) Bank Determination - Ranking Order - Payment Method , currency USD  , rank order , House Bank.
    4 ) Bank Determination - Bank Account -  House Bank , payment Method, currency USD , Account ID, Bank Subaccount.
    Which part of configuration is missing ?
    P.S. :- My company code currency is INR. Invoice posted in USD and require to pay in USD itself.
    Experts guidance will be appreciable.
    Regards,
    Sharvari Joshi.

    Hi:
             Please make sure that you have specified a House Bank in the vendor master record or line item.
    Also have a look at what you have configured in  FBZP . SAP reads the  Bank Determination ,Ranking Order to determine whether payment method C can be used. Ranking Order, Bank Acocunts, Available Amounts and Value Date all should must be configured for payment method C. Also make sure the payment method C is assigned to the company code.
    Please check these all and revert back.
    Regards

  • Report to view all the Roles and Transactions assinged to a particular user

    Hi,
    I need to develop a report to view all the Roles and Transactions assinged to a particular user along with the Authorization values. So, if provide the Username, the report should be able to give Roles, Transaction Codes and the fields and thier authorization values for that TCodes..
    Regards,
    Sreenivas Raju

    Try this FM once - SUSR_USERS_LIST_ALV . It provides a list with Roles, Profiles, and also a detail button to check the authorization values etc.
    Also try this FM - SUSR_USER_DISPLAY_WITH_AUTHS, SUSR_USER_AUTH_FOR_OBJ_GET , SUSR_USER_DISPLAY_WITH_S_TCODE

  • Vendor - MArk for Deletion at Comp code & Pur Org Level

    Hi Gurus
    I want a list of vendors (about 150 Vendor)  to be  Marked for Deletion at Comp code & Pur Org Level  
    How to proceed ?

    hi,
    To be able to archive, you must set the deletion flag in the master record. You can set this flag for a complete vendor or for individual company codes or purchasing organizations.
    You can archive data from different tables using the archiving object FI_ACCPAYB...
    Mark a vendor for deletion centrally as follows:
    Choose Master records ->Maintain centrally -->Mark for deletion.
    The initial screen appears.
    Enter the vendor account number and, if you wish, the company code and a purchasing organization.
    If you do not specify the key for a purchasing organization, you cannot delete this area at a later date, should you wish to.
    Select ENTER .
    The screen for specifying data for deletion appears.
    Select data to mark for deletion by clicking next to the appropriate field.
    Save your entries by choosing Vendor ->Save.
    The system displays the initial screen, with a message confirming that the data has been saved.
    Mark a vendor master record for deletion for the Accounting Department as follows:
    Choose Master records -> Mark for deletion.
    The system displays the initial screen.
    Enter the vendor's account number and the company code.
    Select ENTER .
    The system displays the screen for selecting areas to mark for deletion.
    Select the data either in the company code or in all areas to mark for deletion.
    If you click next to the All areas field, the system will later delete all data for all company codes and for all purchasing areas in this vendor master record.
    Save your entries by choosing Vendor -> Save.
    After you mark a vendor master record for deletion, you can still post to the vendor account. This is necessary, since you might still need to clear open items. When you post, the system issues a warning that you are posting to an account that is marked for deletion.
    Displaying Archived Vendor Master Data
    To display single documents for the archiving object FI_ACCPAYB using Archive Information System you require an information structure that has been created based on one of the following standard field catalogs provided by SAP:
    ●     SAP_FI_ACCPAY_1 (vendor master data FI)
    ●     SAP_FIACCPAY_2 (vendor master data SD)
    Each information structure must be active and filled.
    Edited by: Priyanka Paltanwale on Aug 21, 2008 9:09 AM

  • I used to use SpeedBit Video Downloader with Mozilla Firefox, but suddenly a problem happened, I can not download with it now at all as there is an code error appears in the bar of SpeedBit like "XML Parsing Error: unclosed token Location: chrome://browse

    I used to use SpeedBit Video Downloader with Mozilla Firefox, but suddenly a problem happened, I can not download with it now at all as there is an code error appears in the bar of SpeedBit like "XML Parsing Error: unclosed token Location: chrome://browser/content/browser.xul Line Number 1, column 8702:....................."
    I did evrey thing, but the same problem
    reinstall SpeedBit, reinstall Mozilla Firefox.
    So what can I do!
    == This happened ==
    Every time Firefox opened
    == 4 days ago

    look people, i may have a solution for this. This happened to me a few times before and resolved alone, but last time it happened was when i turned off my router and back on while my comp was running and appeared when i tried opening firefox after that. so wat i did was i shutdown the computer and the router and tried turning both on again, and it resolved.
    Therefore, Summary: Shutdown computer then turnoff router then turn both back on
    Hope this helps anyone.

  • Re:How to supress the customised functionaliteis in a copied comp code

    Hello Friends,
    My client requires a new comp code 3015 which is going to have only some functionalities of the existing comp code 3000.
    The functionalities are all customised. After copying the comp code 3000 , how can I supress the customised functionalities which are not required in the comp code 3015.
    Also please kindly give me the tips for copying the comp code
    Awaiting your response.
    Thanks,
    Krishna

    Hi Michael,
    thank you for your advice! This problem is solved...
    ...but I have another issue. Ive implemented 2 editable fields in my popup. The user should fill that fields with context and that context should be processed in the calling view of my popup.
    My question is how to transfer these information from my popup to my calling view or method?
    I tried the following...
          lv_context_node ?= m_popup->get_context_node( 'QUICKACT' ).
          IF lv_context_node IS NOT INITIAL.
            lv_text = lv_context_node->get_date( attribute_path = '' ).
          ENDIF.
    But it doesnt work! The context node object is always empty/initial.
    Thank you!
    PS: Another possibility could be that the object / node of the calling view is transferred to the pop-up in order to process it there.
    Edited by: Marcus Findeisen on Feb 22, 2011 12:13 PM

  • Transfer of emp from one PA to another PA in same comp or diff comp code

    Dear Members,
    I have been struck with new requirement from client. During transfer case of employees from one PA to another PA (personal Area) the pernr doesnt changes within same company code or different company code.
    My client needs if a employee has been transfered from one PA to another PA then automatically the Personal no. should change. It should happen for both within same company code or different company code, and his / her entiltled leaves should not be lossed, because its only tranfer case.
    In current scenario, pernr doesnt change at all whether it may be same or different compant code.
    guide me to resolve this with any configuration needed.
    Chandan

    or you can also have this triggered in the action like In case of global mobility when an employee transfers from one country to another we transfer all his personal details to the new Pernr and have a link between both the pernr's you can ask the programmer to create a dynamic action that transfers all the current existing master data info types to the new Pernr

  • Create a New Comp code with a bit similar to the existing ones

    Hello Friends,
    My client requires a new comp code 3015 which is going to have only some functionalities of the existing comp code 3000.
    The functionalities are all customised. After copying the comp code 3000 , how can I supress the customised functionalities which are not required in the comp code 3015.
    Also please kindly give me the tips for copying the comp code
    Awaiting your response.
    Thanks,
    Krishna

    Hi,
    You can copy company codes with EC01 transaction.
    Regards,
    Eli

Maybe you are looking for