Setting authorization for BP access

hi, we have few requirements related to controlling access to Business partner master data.
1. there are sales teams for each geography and they need to see only accounts in their geography.
2. there are account teams who get to access only few named accounts.
any pointers on how to set these..i am aware of authorization groups but that is not solving the complete requirements
thanks
RH

Hi RH,
You can try and see information on Access Control engine and this is a functionality provided by SAP to restrict certain users to access data relevant to them and you can search forum for ACE.
This is useful for PCUI application
Thanks
Srini

Similar Messages

NO AUTHORIZATION FOR GRAPHIC ACCESS

Hi,
I am using pcui iviews in enterprise portal, I select a particular activitiy in activites application and click on "print", It gives me error saying NO AUTHORIZATION FOR GRAPHIC ACCESS (BDC)..
if some one has encountered this problem. please help me how and where should i set the authorization to get it going
thank you

hey
could some one help me in this regard..please urgent ??
Thank you

I have a mac mini server which I want to set up for remote access from windows and mac pcs. How do I do this. I can access it form my home network OK

I have a mac mini server which I want to set up for remote access from windows and mac pcs. How do I do this. I can access it form my home network OK

Posted in error.

Regarding Error: No Authorization for Graphic Access (BDS)

Hi,
When I try to view the print preview of a form, I am getting the following error message:
No Authorization for Graphic Access (BDS)
Please help me resolve the issue.
Thanks, Sai.

Try to check Note 1068808 - Quotation PDF:No authorization for graphic access (BDS)
1039489 BDS Access Authorization to Sales Manager Roles
Regards.

How to set sourceURL for MS Access database in other computer?

How to set sourceURL for MS Access database in other computer?
getConnection("jdbc:odbc://www.micrsoft.com:9999/msaccess");
How do you determine the port for the MS Access?
Thank you very much.

How to set sourceURL for MS Access database in other computer?You don't.
How do you determine the port for the MS Access?You don't.
Databases like Oracle and MS SQL Server have 'server' software which runs on a server computer. Requests talk to that server software. MS Access does not have a server, so there is nothing to talk to.
You either must use a DSN or create you own server. For the DSN each client must have a mapped driver to the computer with the database. For your own server search the Sun site for JDBC drivers or use RmiJdbc (http://www.objectweb.org/)

No authorization for graphic access (BDS)

I'va a authorization problem I've tried to run the function module of the smartform from se37 transaction. The function module retrives this result
"No authorization for graphic access (BDS)"
Can I add this authorization to that user?
Thanks

Hi
Is that user is critical, ask the approval from the higher authorities,
Assign the authorization object using PFCG.
If u are not sure of the assigned authorization, make a trace over the user and check what object should give access? and assign it.
Regards
Bhaskar

How to set authorization for BW Workspace in backend and Portal ?

Hello Expert,
                     I have developed one BW Workspace in development environment . I have some query regarding BW workspace authorization for access in portal . Some of the queries are as follows:
1) How many composite provider we can build up inside of one workspace that we can go by Tcode ---RSWSPW ?
2) After activating the workspace it shows in RSWSPW ,but this workspace/composite provider will be available in Info Area(in RSA1) or some area else from where we can see this ?
3) Now our requirement is like that -- we have to provide some workspace for SD power user ,Finace Power user & Marketing Power users, in this situation how can we put authorization in bw workspace like SD power user should not see the FI Power user's & Marketing Power user's Workspace rather than his own workspace ?
4) In our requirement, we are going to produce some bex query on top of bw worksapce composite provider . For creating this query ,we searched provider by puting provider name directly in serach option , but is there any option to search the bw worksapce related composite provider by putting info area name in query search ?
5) In another senerio, we gone to create BO AA OLAP report on top of bw workspace composite provider but in source option we cant see the provider ,infact we could not search the composite provider in search option in source selection ----   do i need to navigate any step in compostie provider to make it enable for BO AA OLAP creation on top of composite provider ?
Expecting and appreciating your guidence and suggestion asap .
Thanks & Regards,
Surajit Pal

Hello Expert,
                 Do you have any idea regarding below questionaries about BW Workspace ?
1) How many composite provider we can build up inside of one workspace that we can go by Tcode ---RSWSPW ?
2) After activating the workspace it shows in RSWSPW ,but this workspace/composite provider will be available in Info Area(in RSA1) or some area else from where we can see this ?
3) Now our requirement is like that -- we have to provide some workspace for SD power user ,Finace Power user & Marketing Power users, in this situation how can we put authorization in bw workspace like SD power user should not see the FI Power user's & Marketing Power user's Workspace rather than his own workspace ?
4) In our requirement, we are going to produce some bex query on top of bw worksapce composite provider . For creating this query ,we searched provider by puting provider name directly in serach option , but is there any option to search the bw worksapce related composite provider by putting info area name in query search ?
5) In another senerio, we gone to create BO AA OLAP report on top of bw workspace composite provider but in source option we cant see the provider ,infact we could not search the composite provider in search option in source selection ----   do i need to navigate any step in compostie provider to make it enable for BO AA OLAP creation on top of composite provider .
Appreciating your early responds and thanks in advance .
Regards,
Surajit

How to set authorization for only Create infotype record

How can I set the authorization so that the user can only create Infotype 14,15,2010,2001,2006 but cannot change and delete the record for these infotypes.
But user has the authorization to create,change and delete other infotypes.

Hi irene,
1. For this we have to use the
   authorisation object
P_ORGIN
2. It has got the following fields, on which authorisations can be controlled.
AUTHC     Authorization level
INFTY     Infotype
PERSA     Personnel Area
PERSG     Employee Group
PERSK     Employee Subgroup
SUBTY     Subtype
VDSK1     Organizational Key
regards,
amit m.

How set authorizations for sales reports and other reports in SAPB1

Hi, I'm currently working in SAP Business One Version 8.82
The issue I'm facing is that I want to set it up so that certain users cannot see other users' sales information. I know that I can turn on or off the Sales Analysis Report for various users for instance, but what I really want specifically is this. Suppose we have 3 different teams: Team A consists of (Angie, Angela, and Anita the manager), Team B consists of (Bob, Barbara, and Ben the manager), Team C consists of (Cat, Charlie, and Courtney the manager). I would like to make it so that everyone can view the individual sales order documents of everyone else (in case a customer calls and needs information, but the salesperson who created that document isn't there); however, Angie should only see her own orders when she does a Sales Analysis while Anita, the manager of Team A, should see the the orders of Angie, Angela, and herself of course.
To summarize, I'd like to see the following
1. Each salesperson can lookup and view any sales order.
2. Each salesperson can run an sales report to view all his/her own open sales orders.
3. Each manager can run a sales report on his/her subordinates, but not on the other managers or their subordinates.
4. The boss or other people working in corporate are able to run a report on all open sales orders.
What's the best way to approach this? Is it best if I create my own report? I haven't created any reports from scratch yet, so I'm not sure exactly how that works. I'd like to be able to group the salespeople up by location if possible. The sales analysis report doesn't really do that, but it is useful. I just don't want everyone to be able to see the numbers on their peers.
Thank you I appreciate any help or advice.

Hi,
1. Each salesperson can lookup and view any sales order.
Answer:
Create own report by using query and save under query manager and the assign for all group. So that all sales person can run this query and can get sales order detail.
2. Each salesperson can run an sales report to view all his/her own open sales orders.
Answer:
Create individual query ( add condition in where clause slpname = 'XXX') for each sales person and save it under query manager and assign to particular user group
3. Each manager can run a sales report on his/her subordinates, but not on the other managers or their subordinates.
Answer:
Create query for only particular team ( condition is slpname = XXX OR YYY OR ZZZ) and save under query manager. Make schedule report on this and send it to only particular manger
Same way create for another manager and schedule report.
4. The boss or other people working in corporate are able to run a report on all open sales orders
Answer.
Create query for all sales person and schedule report to big boss.
Hope you can get an idea.
Let me know if you need sales report ( advice required field)
Thanks & Regards,
Nagarajan

How can I set password for email access to prevent other from reading my mails?

If i go to settings and erase my password that wont work. What can I do?

Either access it via web mail only where you'll have to enter user name and password every time, or put the passcode lock on your ipad itself, locking down the whole device

Authorizations for document management

Hi,
I'm trying to figure out what every authorization means and which effects it has...
I created a new user, gave him all the necessary authorizations to use certain transactions in Document management by making a new role/profile for him
After trying everything out, I still have a few questions:
- with Authorization for change object link (C_DRAD_OBJ)I have the following properties:
Activity: change, display
document type: DRM-DRM
linked SAP object: *
document status: *
I know how to display my object link, but how can I change it? Do they mean with changing the object link, the creating of long text for the link or is there more to it?
- with authorization for document access (C_DRAW_DOK), I can't figure out what the options "Display Application archive" and "Change application archive" mean. Which effect does it have when I choose them? Where do I consult the application archive? What is the application archive? => SOLVED
- Do I also have to give the authorization "Display" when I want to give the authorization to delete something? How can I delete a document info record without displaying it? =>SOLVED
- With "Status dependent authorizations for documents" (C_DRAW_TCS) what do the following options do?
 *change application start (which difference with change?)=>SOLVED
display application start (which difference with display)=>SOLVED
 *request
 *display archive =>SOLVED
 *change archive=>SOLVED
I know it are a lot of questions but I'm making documentation on the authorization profiles of document management and when I figured those few last things out, I can share my documentation with the rest of you...
Message was edited by: Vicky Liesens

Good morning,
Havent been watching this thread for some time now, so please shout if you do have any questions.
Just a quick note on deleting documents:
Setting the deletion indicator will simply mark the DIR for deletion, but, it will still be on the dB.
After you have set the DIR for deletion, you need to run the program "MCDOKDEL", which has a test mode and a real mode.
This program will physically delete the documents that you have marked for deletion.
Regards,
Freddie Botha
www.documation.co.za
SAP DMS, CAD Integration, Data Archiving, Imaging and Scanning and Workflow
[email protected]

Authorization for Form settings button?

Hi Experts,
How we can set Authorization for Form settings button?
Regards,
Sanju M S

Hi Sanju,
Please use Additional Authorization Creator Window to restrict users from accessing User Tables.
Definition
Use this window to create and add a new permissions object for user-created forms.
To get here.. Admin.>System Init > Authorization > Additional Authorization Creator
In the Additional Authorization Creator window, enter an Authorization Id and Name, From the option dropdown Select the options you want.
To enter the FormID in your case 63771, Click Edit and enter the Form Number of the User defined table.
NOTE: To get the Form number open the user defined table and on the Status Bar at the bottom you can see the Form=xxxxx (number). Use this number. To view the form details on the status bar, please click View > System information on the Top Menu.
One you have entered the Form number click Update.
Now in the General Authorization Window you can see an additional entry on the right side window bottom called User Authorization clicking which you will see the Additional Authorization you created.
Thanks,
Joseph

Authorization for opening & Closing posting periods - OB52

Hi,
Is there any way to set authorization for opening & closing of posting periods in OB52?
My scenario:
I have 2 company codes - A & B assigned to 2 different posting period variant - say PPA & PPB.
The user belonging to CoCd A should not be able to open/close posting period of CoCd B and vice versa.
Is this possible through any authorization settings?
Request your help on this.
Regards,
Sridevi

Hi Sridevi
Please go through the following:
You can assign authorization groups for permitted posting periods. This means that, for example, some posting periods can only be opened for particular users within monthly or annual closing. You can only assign the authorization group at document header level and it only affects period 1. The authorization object is called F_BKPF_BUP (Accounting document: Authorizations for posting periods). Read the corresponding chapter on "User maintenance" in the "Assigning authorizations" topic.
"User maintenance"
Due to the modular authorization concept of the system, you can define authorization profiles which are tailored to the workplace of your employees. You can, for example, assign authorization to a workplace in the Accounts Receivable, Accounts Payable or General Ledger Accounting areas.
By assigning authorizations you define which business-related objects your employees are allowed to process and which editing functions are allowed.
In the following activities for authorization management, you must carry out the following for employees who are to work with the system:
Assign authorizations
The authorizations are assigned by specifying permitted values for the pre-defined objects.
Define profiles
In the SAP system, authorizations are grouped together in workplace profiles. Therefore one or more profiles must be allocated to the individual employee in the master record.
I hope this helps.
Regards
Kavitha

Authorization for Min., Max level

Dear Experts,
Where to set authorization for Minimum and Maximum Inventory level for logistic users?
Regards,
Ravi

Hi Ravi,
Field level authorizations are not available in SAP.
You can only set authorizzation based on Item Master data.
Hope this will help.
Thanks,
Neetu

Authorization for G/L Accounts

Dear Gurus,
Can you please provide me some information for G/L Accounts authorization objects.
I need to set authorization for one G/L Account for one user only. I know authorization object F_BKPF_BES, but it´s used for authorization group G/L Account and I would need only for one specific G/L Account.
It´s possible?
Best Regards
Jakub Vaněk

Do you want the authorizaion Check at the time of Posting or Display of GL Accounts?
if you want authorization at the Posting level then you may try to use validation in SAP
Please let me know if it help you.
Regards,
Vivek

Setting authorization for BP access

Similar Messages

Maybe you are looking for