Sales office specific authorization

Sir,
My user has multiple sales office , but they doesn't want one sales office has seen another sales office order document,delivery document and billing document , so how I restrict one sale office has not seen another sales office related document?
Please solve this problem as early as possible.

The scenario is as follows ;
sales organization-zxxxx (same for all sales office)
Distribution channel-zx (same for all sales office)
Division-zx (same for all sales office)
Sales Office-zx1,zx2,zx3....... (are state wise)
the client wants users from one sales office will not be able to create /display sales order for other sales office.
Please help.

Similar Messages

Merge of Sales Offices?

Hi,
There are 2 comp's running in SAP. Now both are merged.
for this, they want to use one office as consolidated ( so far, they r using 2 sales offices in different comp codes, after merge sales office will be common for both, then as per their req, client wants to have only one sales office for both)
these sales offices maintianed in all Customer master data of both the comp's.
now if they want to consolidate we have to update all the CMR with one Sales office?
can we use BDC for this? or MASS usage?
Please let me know the table name for condition records where it will store?( they maintained some records specific to sales office, i have to find out how many condtion records exist for sales office specific)
Can any one have idea?
plz ,

Here are some tables list, however i didn't quite get your requirement clearly. Condition record, do you mean pricing condition reconrds...
Just to be on safer side i am posting all relevant which came to my mind at this time.
Customer master data
KNA1          Customer master
KNB1          Customer / company
KNVV          Customer sales data
KNBK          Bank details
KNVH          Customer hierarchy
KNVP          Customer partners
KNVS          Shipment data for customer
KNVK          Contact persons
KNVI          Customer master tax indicator
SD
TVKO          Sales organisation / company code
TVTW          Distribution channel
TVBUR          Sales office
TVKBT          Sales office text
TVKGR          Sales group
TVGRT          Sales group text
T171T          Sales district text
TVKBZ          Sales office to sales area
TVBVK          Sales group to sales office
Pricing :
KONH          Conditions header
KONP          Conditions items
KONV          Procedure ( billing doc or sales order)
KOND
Hope it helps
Regards

COPA authorization by sales office

Dear Experts
In my COPA environement we have many branches each branch is a cost center and sales office (one to one relation). In my KE30 report I want Mangers of each sales office to see their report only. In KE37 we are able to retrict users by company code but was unable to restrict by sales office. If I select the sales office in KE37, the users will be restricted if (*) is selected for sales offices, but if I choose one sales office the report will not be executed. I tried to develop a report where the sales office will be variable and should be selected in the KE30 report screen like compnay code, and period but I failed. Any input please.
Regards
Ahmed Zain Hassan

Hello Ahmed,
Please review and implement note 165087.
As soon as you created your own authorization objects in transaction
KE37 or KE97 and assigned it to a certain user the system checks the
user's authorization before he or she executes a report in transaction
KE30 or KE24.
Please read the description in transaction ORKE: > Tools > Authoriza-
tion Management > CO-PA-Specific Authorization Objects:
- Define Authorization Objects for the Information System (Text button
on the left).
Please also review and implement note 165087.
In order to analyze this issue please check the authorizations for the
relevant user in transaction SU01 and which authorization objects are
checked when this user execute transaction KE24 (> run a authorization
trace; transaction ST01).
Please ask your authorizations guy to check the customizing of the
authorization object again (on the basis of the documentation in
transaction ORKE and the authorization trace in transaction ST01).
Best regards,
Ronghua Fan

Authorization object for sales office

Hi,
We have a requirement, we have one our head office and there are around 20 sales office, for each sales office there is a different user id (two user logins per sales office ), in customer master for each customer we are assignning one sales office, and only the user of that office is responsible for all types of transaction for that customer, we want that sales office assignment to user, and that user should not able to see the any details of customer like sales orders, billing details order booking etc. which is not in there sale sales office , so which authorization object, or how we can get this,
regards,
zafar

Hi
Sometimes when you add a new authorisation object with some specific value, system still allow to do the transaction for other values which is not available in that authorisation object, because may be in some other Profile same Authorisation Object is available and where user has complete rights, so kindly take the help of Basis Consultant and check that same Object is not availbale in some other profile of User with complete authorisation.
Thanks and regards,
Amitesh Anand

Authorization restriction at Sales Office level

Dear Gurus,
I need to restrict the user for all the sales transactions on the Sales Office level.
I mean the specific user should be able to create a sales order for the customer who comes under the Sales Office assigned to the user. User should view the sales order and invoice list for a specific sales office in VA05, VF04 also this is VF05N.
I tried to add the sales office field in std authorization object V_VBAK_VKO and did it but after completion of consistency check also the user was able to create a sales order for a customer belongs to the sales office other than assigned one.
For me it is mandatory to restrict the transactions and reports of SD at sales office level.
Please tell me if there is any way complete this restriction. Or to restrict the user from viewing the sales documents which are not created by himself only.
Your suggestions are also welcome. please suggest me.
regards,
Sanjay

Hi,
Check the below link, it might fix your issue.
Re: how to restrict the Report based on sales office
Br, Sats.

How to authorization sales office and sales group in VA21 and VA01 t-code

I need to authorization sales office and sales group in va21,va22,va23 and va01, va02, va03 to control users access the sales order.
I found some articles how to resolve this problem.I have created new authorization object Z_VBAK_ VKO, and add these fields to the object: VKORG: Sales Organization, VTWEG:Distribution Channel, SPART: Division, VKBUR:Sales Office, VKGRP: Sales Group, AUART:Sales Document Type, ACTVT:Activity
I have add the object Z_VBAK_VKO to va01, va02, va03 in SU24 translation.
I test the authorization , but fail, va01 and va02 do not check the authorization.
Why? what can i do? please help me .
thanks

Dear Wu
I think you are using the concept of Master Roles and Derived Roles.If ur using then create a master role and derived role for the authorisation group you want. And in the derived role assign the specifics to the respective logins ID. If you want to attach the authorisation to the T-Codes Va01 or VA21 etc then you have to use Exit.
Correct me if i am wrong.
Regards
Jyotsana

Authorization Check in SD according to sales office

I have several sales offices under the same sales area. How can I restrict users from different sales offices to
1. can't see the customer which does not belongs to his/her sales office (I have enter the sales office in the sales view of customer master)
2. can't see the sales order which does not belongs to his/her sales office
thanks!

I have created an authorization profile for it. When I add transactions (VD03, VA03) to the profile, a list of authorization behind will be added to the profile. I found that the objects restrict sales org., dist. chan. and division only. When I look into the program for VD03, there is no authority check on sales office. But I just wonder if there is any methods (User-Exit/BAdI) to enhance it. Thanks!

Sales office authorization check in customer master,Sale order and billing

Hello Experts
We need to restrict authorization for customer master, sale order and billing based on sales office.
Can somebody guide me how to activate this ? Has anyone of you have successfully done that?
Regards
kumarlib

Hello Kumar,
User authorization is within Basis expertise, but if you want to get some feel for what authorization objects are take a look at trans SUIM. But basically how it works is for a given transaction the level of check is specified -- in this case Sales Office. Based on values stored in that field the user is allowed or not allowed transaction access.
So you determine whatever the needed matrix is for authorization restriction (i.e. user A can access Sales Office xxx, user B can access Sales Office yyy & so on). Also give Basis the transaction codes to restrict, along w/the technical table/field for each (like from customer master - KNVV-VKBUR, from sales doc level VBAK-VKBUR). Basis sets up the authorization object w/assignments to the users accordingly.
This is standard SAP & your Basis support should be familiar with it. Good luck.

Set "Sales Office" as an authorization for all sales document

Dear SD Expert,
        Base on ECC 6.0, I have to set authorization which check u201CSales Officeu201D in create/ change / display all sales document.
         I found that authorization object u201CV_VBKA_VKOu201D contain authorization filed ; that are, sales org, distribution, division, sales office and sales group. Also u201CV_VBKA_VKOu201D have assign to (Transaction code: VA03, VF03) as standard SAP (see in T-Code : SU24) . However, when I assign; for example, T-Code u201CVA03u201D, u201CVF03u201D in PFCG. After generated profile, only u201CSale org, distribution chan., and divisionu201D is pop-up. I wonder that
1)     Why u201CSales officeu201D dose not show in u201Corganization levelu201D ?
2)     How can I set u201CSales Officeu201D as an organization level? for checking an authorization
Please give me step-by-step.
Regards,
Prach

Refer SAP Help url it may help you , I did not work on this,[Maintain authorizations|http://help.sap.com/saphelp_45b/helpdata/en/91/6cec6eb435d1118b3f0060b03ca329/content.htm]

Authorization in Webclient on Sales Office for Opportunity and Activity

Hi all,
I am trying to set up ou authorization scenario in CRM 2007 Webclient.
I would like to restrict the access to Opportunities and Activities based on the Sales Office of the user.
I have set up the following objects:
CRM_ORD_LP and CRM_ORD_OE.
The USER is assigned to a Business Partner (Employee) which is assigned to a Position which is assigned to a Sales Group -> Sales Office -> Sales Org.. etc.
In SAP GUI this is working fine but in the Webclient I am able to create/edit and display opportunities and activities for all Sales Offices.
Please let me know!
BR,
//Anders
Edited by: Anders Grönwald on Dec 4, 2008 12:49 PM
Edited by: Anders Grönwald on Dec 4, 2008 12:55 PM

Hi Anders
Were you able to resolve this issue
If so could you indicate how this was achieved
Regards
Eddie

Authorization Object - Sales Office in VA02?

Hi SD Guru's
I have a requirement where in i want my delhi finance team to release orders created only by Delhi Sales office.
Any suggestions?
How do i find authorization's for a T-CODE?
Regards
Ravi

Dear Ravi,
You can refer to standard Role "SAP_CS_AG_CUST_ORDER_COMPLETE".
Authorizations Under Sales and Distribution -> Billing: Authorization for Sales Organizations
Similarly, you can maintain for Authorization for Sales Areas by selecting proper Activity (Create, Display, Change etc.), Sales Organization, Distribution Chennel, and Division.
You can use Authorization Object V_VBAK_VKO for "Sales Document: Authorization for Sales Areas".
Create Authorization for Roles as above and assign them to Users.
Regards,
Naveen.

[CRM] Change sales office from within an order

We've been trying to get the following to work... as you might guess, so far without success.
From within a CRM order, if we change the partner number for the department a check is being done whether that partner belongs to the same sales office. If that's not the case, the sales office has to be adjusted.
Since this might have an effect on authorization, the changing of the sales office has to be done in a separate job (action). In this job, I do the following:
- Retrieve data on the object
- crm_order_read for that object
- select the correct sales office
- prepare the crm_orgman structure with the new data
- crm_order_maintain with the crm_orgman and inputfields tables
- optionally commit work, bapi_transaction_commit etc.
For as far as we can see, the data is correct. However nothing is being changed. Ideally what I'd like to do is break into the process, change the object that's being processed in memory, and let the system do its job.
What we've also tried is (shame):
- Retrieve data on the object
- crm_order_read for that object
- select the correct sales office
- direct update the corresponding tables with the new values
This works, but as soon as we return control to the system, the changed values (verified, if we look at the tables the values are changed) are reset to what they were.
It's taking way too much hours for something that should be (in my eyes) a pretty simple action. Any suggestions? Thx in advance!

Hi Egbert,
Please take a careful look at the GUIDs you are using: if you are using the orgman structures, the REF_GUID is not the ORGMAN-GUID but instead the ORDERADM_H-GUID. Can you confirm if this has been checked and if it then still is not working? The COMMIT_WORK BAPI is also not necessary.
Kind regards,
Joost Janssens
PS Please reward points if this reply helped you!

Unable to open sales order since sales office is deleted from configuration

Hi All,
We are facing a peculiar issue in our production system. The issue is we have created a sales order in 2009 and now we want to delete the sales order to close a WBS. When the sales order was created the sales office entered for that order is "ABC1",
In 2010 the sales office "ABC1" is deleted from config and the transport is moved to production.
Now when we try to open the sales order in VA02 or VA03 system is throwing an error message "sales Office "ABC1" is not defined". Is it sap standard behaviour?. My concern is why is sap refering to the config for a transaction which is already created and saved. If it is doing the validation for a new order it makes sense.
Could any one throw some light on whether this is SAP standard behaviour and is there any way to fix issue.I thought of bypassing the check in debug mode but due to SOX complance we can not do that in produciton system.
Any inputs in this regard is highly appriciated.
Thanks,
Srini

Hello Srini,
if yes even this option is also not suffice as we wont
have authorization to transaction SE37
If the access to Transaction code SE37 is restricted for you guys then try out using "SHDB" to delete the Sales Order and post your feedback.
[Transaction Recording |http://help.sap.com/saphelp_erp2005/helpdata/en/61/04683ce9e7572ae10000000a11405a/frameset.htm]
Or
You can get in touch with technical consultant and ask them to prepare a Program which will inturn call the Function module BAPI Sales order change and perform the required action...
Regards,
Sarthak
Edited by: sarthak mohanty on Jun 7, 2011 7:24 PM

How to restrict sales group and sales office in va01?

in transaction "va01" ,I want to restrict "sales group" and "sales office", but there is no
relative authorization object. I create a role named "z1000test001" with va01 , there are only "division","sales organization"
and "distribution channel" which could be restricted.
the authorization object with va01 is : V_VBAK_VKO.
and I find another authorization:V_VBKA_VKO ,which contains:"sales group" and "sales office",
but this one seems have no relationship with va01.
Is there any method to restrict "sales group" and "sales office" in va01?
Could anybody help me?

Hello,
This has been discussed before and there's a solution available.
Have a look at this thread: Authorization for Sales Office and Sales Group
Cheers
Jurjen

How to restrict the Report based on sales office

Hi Experts,
I am using BW 3.5. I have a requirement that my sales report should give output to particular user with his respective sales office only.
For Example :
User,   Sales Office
   A , Delhi
   B, Mumbai
User A should not be able to see the data of Mumbai Sales office. As both the users using the same Report,
Please suggest How to achieve this.
Helpful answers will be awarded.
Thanks&Regards,
Venkat

Hi,
To do this, you need to make the infoObject Sales Office authorization relevant.
Create an authorization Object using the t-code RSSM for this InfoObject. Restrict it with Activity.
Create a role for each of the Sales Office and restrict your authorization variable with that office.
Now you have 2 roles for eg. One for Mumbai, other for Delhi. Assign them to respective users.
Create a authorization variable for Sales Office and restrict your report with that.
Use the below documentation for creation of Authorization Object.
http://help.sap.com/saphelp_nw04/helpdata/en/a0/48f438f3422f2ce10000000a114084/frameset.htm
Regards,
Gaurav
Edited by: Gaurav Kothari on Sep 18, 2009 11:04 AM

Sales office specific authorization

Similar Messages

Maybe you are looking for