To restrict a user from using a custom transaction

Hi,
I have a created a custom transaction  ZTEST. Now i want only a few users to use this and not all. How can i achieve this. I see an authorization object in the SE93. But can anybody explain me in detail regarding the same ?
Regards,
Pramod

Hi
We can use authorization to restrict the access to a perticular transaction. Permitted Activity configurations are performed into it.
Before a User can be granted permission by the Authorization Object, the User’s Master Record is assigned a Role, which includes a Profile.
The Profile contains what is simply called the Authorization and is where the specific data for the Authorization Object’s field is assigned to the configured Permitted Activity.
You need to create a role or modify any existing role, using t code pfcg . On the authorizations tab in “Maintain Authorization Data and Generate Profiles”, press the “Change Authorization Data” button.
On the next popup screen named  “Choose Template”, select the “Do not select templates” option.
Press the button “Manually”, and enter the authorization abject attached in your transaction.Select the Tick button to continue.
Expend all the nodes.
Press edit icon  or line 'activity'. and choose the one which you want to allow to user.
Generate the Authorization using the generation.
Now all the users who has a role attached which you edited or created, will not be able to execute that t code.
go to t code su01 to attach role to perticular user.
Regards
Vishal Kapoor

Similar Messages

  • How to restrict a user from using the transaction code SU01?

    How can I grant a profile to a user with the profile SAP_ALL except running the transaction code SU01?
    I know how to lock the transaction code using SM01 but is there any other way to do it.

    Go to S_TCODE
    Double click on it and give the combinations like        A*  -   X*
                                                                                 SU00
                                                                                 SU02 - Z*
                         Try this one definately it will work.

  • Restrict users from using Manual series

    Hi SAP,
    Is there a way to restrict users from using the Manual series?
    Thanks,
    Janice

    Hi Rahul,
    Ok, i have seen already the authorization for document manual numbering and it is available only for 8.8 versions and not on 2007 version of SAP.
    Anyway, when im doing the testing i found out that for banking transactions like incoming, user can still use the manual series even if he has no authorization for manual document numbering.
    Another concern from our client was  the use of manual series only, is it also possible in SAP? I tried to give user authorization in the manual document numbering and no authorization to series group no but user cannot already open the transaction window. Let us know if their inquiry is possible so i could inform them that only manual series can be restricted.
    Thanks for your help.
    Regards,
    Janice

  • Is it possible to restrict the user from creating a sibling and allow him to ONLY create child nodes in DRM?

    When in a hierarchy, a user right clicks on a node to crate a new node, he has two options
    -Child
    -Sibling
    Is it possible to restrict the user from creating a sibling and allow him to ONLY create child nodes?
    Business cases:
    1. different level nodes need to have different prefixes.
    - Thus, the default prefix property definition uses the level number to assign a prefix
    - Also, a validation, to ensure the correct prefix, uses the level number
    But if the user can create a child and a sibling then the default prefix will only be right for a single case and not both.
    Thanks

    If the images are exactly the same size then make sure the layer with the mask
    is the active layer and in the other documents go to Select>Load Selection and choose
    your document with the layer mask under Source document and under channel choose the layer mask.
    After the selection loads press the layer mask icon at the bottom of the layers panel.
    MTSTUNER

  • Restrict A User From Changing A Payment Term While Adding A/R Invoice

    Dear Experts,
    We want to restrict our users from changing payment terms while adding A/R Invoice.
    We use SAP B1 2007 b.
    Thanking  you
    Pradnya

    Hi,
    try below code in transaction notification procedure:
    if (@object_type = '13') and (@transaction_type IN ('A', 'U'))
    BEGIN
    IF exists (select T0.DocEntry FROM OINV T0 Inner Join OCRD T1 on T0.CardCode=T1.CardCode Where T0.GroupNum  !=T1.GroupNum and T0.DocEntry =@list_of_cols_val_tab_del)
              Begin
                   SET @error = 30
                   SET @error_message =N'You are not authorized to change payment terms'     
              end
    END
    for how the transaction notification works or how to use :
    check How to use Transaction Notification
    Thanks,
    Neetu

  • How to restrict the user from making any changes in Sales order- item level

    Hi to all
    How to restrict the users from making any changes in sales order at item level if the same sales order is released by senior user through status profile.
    Regards
    Anish Parikh
    Edited by: anish parikh on Jan 24, 2008 5:16 AM

    Hi Anish,
    This can be achieved through the roles and authorization.
    This can be done through the basis team. they can create user profiles and roles.
    For the roles they assign some transaction codes so that they can view the only assigned tr. codes.
    Like that ur requirement can be done.
    Also u can prevent the user to change any fields in the sales order screen (VA02). for that please modify the authorisations.
    Hope i answers.
    Reward points if useful.
    Edited by: kaleeswaran bhoopathy on Jan 24, 2008 9:57 AM

  • How to stop user from using 961 mvt type in MB1C transaction code?

    Hi Friends,
    We have two companies. Already we have restricted end user for using 961 & 962 mvt type in MB1C transaction code in one company code 1000. Now, we want to restrict end user for using 961 & 962 mvt type in MB1C transaction code in other company code 1200.
    I have checked configuration using OMJJ transaction. But, it is there so there may be some different way of control.
    Can any body help me?
    Regards
    Siva

    Hi,
    To restrict/block the movement type,  the steps are:
    1. use transaction code OMJJ.
    2. Enter the movement type you want to block.[From 961 To 961](do for both961& 962)
    3. Select the Second option in the List which appears in the left. (Allowed Transaction).
    4. Remove the transaction codes (MB1C)from where you do not want to use that particular movement type& save.
    For user specific to block the movement type, pl consult Basis Consultant.
    Regards,
    Biju K

  • Restricting the user from deleting a personel number

    Hi All,
    Can anyone help me in restricting the user from deleting a personel number.
    Thanks & regards,
    Venkat

    Hi Venkat,
    The utility menu will ultimately calls to PU00 so it doesnt matter , system wont allow him to delet.
    You can try it out in quality if you want.
    Award points if useful
    Regards,
    Bhupesh Wankar

  • Apps that arbitrarily restrict which users may use the App, such as by location or carrier, may be rejected

    Hello,
    I have an inquiry, this section:
    Apps that arbitrarily restrict which users may use the App, such as by location or carrier, may be rejected
    We have an mBanking app to be built and the Bank is insisting on forcing a mandatory update when there is a need
    and the user should be restricted from logging in in such case (as a security update or important bug fixes).
    Does the above fit in what will be rejected? Will the application be rejected in such a case? if so are there any workarounds?
    Thanks
    nsawaya

    No, no, and no.
    Sorry, but this is Apple we’re talking about here.
    Bob

  • Restrict Standard User from not removing the COM-Addins registered under HKLM with Admin rights.

    Hello,
    I have developed a COM-Addin for word 2013 by VS 2013 and installed it under the HKLM with Admin rights. Now from an non-admin account, ie Standard User I'm able to uncheck that addin from the COM-Addins dialog and remove it also. Previously I have done the
    same thing for word 2007 addins and if a non-admin user tries to uncheck it the warning "The
    connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" pops
    up. But this is not happening for office 2013 apps(basically word, excel and powerpoint). 
    This is happening for all Add-Ins installed under HKLM.
    How can a Standard User be restricted from unchecking and removing the Office Addins registered under HKEY_LOCAL_MACHINE with same warning "The
    connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" in
    a pop-up box?
    Regards, Sayan

    Hi,
    The behavior is changed since Office 2010. Office 2010 and Office 2013 allows a standard user to turn a per-machine add-in off by unchecking the add-in in the COM Add-ins dialog.
    To restrict Standard User from not removing the COM Add-ins, we can try to add the add-in to
    the Group Policy option: List of managed add-ins in the Office Group Policy template.
    Word for example, the policy is under:
    User Configuration\Administrative Templates\Microsoft Word 2013\Miscellaneous
    To enable this policy setting, provide the following information for each add-in:
    In "Value name", specify the programmatic identifier (ProgID) for COM add-ins, or specify the file name of Word add-ins.
    To obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins.
    To obtain the file name of an add-in, click the File menu in the application where the add-in is installed. Click Options, click Add-ins, and then use the Location column to determine the file name of the add-in.
    In "Value," specify the value as follows:
    To specify that an add-in is always enabled, type 1.
    Hope this helps.
    Regards,
    Steve Fan
    TechNet Community Support

  • How to restrict the user from accessing other screens before submittingdata

    Hi All,
      I have some screens developed in Webdynpro ABAP and all these have been linked to Portal as pages. In Portal If i click on the link in detailed navigation i can see the corresponding screen on the right side. Now in one screen i have to input some data and submit the data, Now my problem is if i enter some data and before submitting the data if i click on any other link in the detailed navigation, that corresponding screen is opening and all the data of the previous screen is lost.
    Can any one suggest me, how can i restrict the user from accessing other screens before submitting the data of that screen from portal perspective.

    Hi Prasanna,
    The pages can be restricted from the user access by using the ACL permission or you can restrict the page by making invisible in navigation area which you do not want to show to the user . Open the page properties and select navigation category in the drop down and select the Invisible in navigation area property to yes.By default this property is No.Change the property for all pcd pages which want to hide from user access.
    Hope this helps you...
    Regards,
    Rudradev Devulapalli
    Reward the points if helpful....

  • Restrict the users to use the field Unplanned delivery cost at MIRO

    Dear Friends,
    I want to restrict some users to use the unplanned delivery cost at MIRO. It should be displayed as visible to enter for some users and it should be displayed in grey mode not to enter anything for some users. I am asking this to restrict some misutilisation of this field by some users. Can I restrict through profiles?
    Simply, I want to restrict the users to use the field Unplanned delivery cost at MIRO through Profiles of them. Pls help me,, it is impacting our business.
    Regards,
    Venkata Reddy.Mudda

    Hi,
    Check the customization for unplanned cost:
    SPRO -- Materials Management -- Invoice Verification -- Logistics Invoice Verification -- Incoming Invoice -- Configure How Unplanned Delivery Costs Are Posted
    Best Regards
    Anamika

  • Is it possible to prevent users from using the ''Purge'' option from the ''Recover deleted items'' in Office 365?

    Hi,
    After speaking with a Microsoft engineer over the phone, I've been told that there is no way to prevent users to go to their OWA and manually Purge specific items from the ''Recover deleted items''. The Microsoft tech told us to place the desired mailboxes
    on a litigation-hold and that all data will be recoverable... but only from the time you place the mailbox onto Litigation-Hold and previous items, which doesn't take effect for new-coming emails. 
    1- From what I understand, any new items coming in the mailbox after the Litigation-Hold is put in place will still be ''purgeable'', right?
    2- Is there a way (PowerShell, Security group, etc.) that can prevent a user from using the Purge option?
    We are very surprised that there is absolutely no thread that talks about this issue, which in our opinion, is a major legal and security flaw from Office 365. This is a main concern for us to actually go with Office365. For instance, this means that at
    any given time, if a user exchanges emails with a competitor, they can manually purge emails sent and receive as soon as it is sent/received, even after Litigation-Hold is in place.
    Thank you for your reply and let us know if you have more questions.
    Normand Bessette, IT support technician, Newad Media

    Thank you for the reply.
    Is there still a way to prevent users from using the Purge option, like with a Powershell script to disable Purge?

  • Restrict regular users to use only certain ldm command options

    I would like to restrict regular users to use only certain ldm command options, for example only list, bind/unbind, stop/start
    What is the best practice to do it?
    Thanks

    Solution provided by one of my colleagues:
    Installing sudo and configure sudoers file "User privilege specification" section similar to the following example:
    # User privilege specification
    root ALL=(ALL) ALL
    user1 host1 = /opt/SUNWldm/bin/ldm ls *
    user1 host1 = /opt/SUNWldm/bin/ldm stop *
    user1 host1 = /opt/SUNWldm/bin/ldm stop -f *
    user1 host1 = /opt/SUNWldm/bin/ldm start *
    user1 host1 = /opt/SUNWldm/bin/ldm bind *
    user1 host1 = /opt/SUNWldm/bin/ldm unbind *
    **Note*: asterisk should be at the end of each row. They are not displayed in the posted message...*

  • How to restrict a user from deleting a PO

    Dear All,
    I have to restrict some users from deleting a line item in PO. They will be authorised to create & change the PO but they must not be able to delete the line item.
    Further it would be more helpful if it is possible to restrict them from deleting one perticular type of  PO(ex-Capex PO). They can change a capex PO but can not delete it.
    Any of the answars will be highly appreaciated.
    Regards
    Rutabhadra Panda

    Hello,
    Speak to your basis guy, put if you have created Capex PO as a particular document type, then maintain authorisation object M_BEST_BSA (Document Type in Purchase Order) and activity 06 delete.
    You may find that delete is still possible through activity 02 change, so you might need to maintain different roles depending on what you need.
    Thanks.

Maybe you are looking for