To restrict authorization of tcode MEK1,MEK2,MEK3,MEK4 at plant level

Hi,
We have a requirement where we need to restrict authorization for tcode MEK1,MEK2,MEK3,MEK4 at plant level.
Presently we can restrict authorization at Purchasing organization level but not at Plant level.
Any pointer please!
Regards,
Chetan

Hi,
You can restrict the users for the authorization of these T-Codes on their User ID. Take help of Basis who controls Roles & Profiles. (T-Code PFCG)
Hope this helps,
Best regards
Amit Bakshi

Similar Messages

To restrict authorization for tcode MEK1,MEK2,MEK3,MEK4 at plant level.

Hi,
We have a requirement where we need to restrict authorization for tcode MEK1,MEK2,MEK3,MEK4 at plant level.
Presently we can restrict authorization at Purchasing organization level but not at Plant level.
Any pointer please!
Regards,
Chetan

First of all, this is not the right forum to post such a question. Coming to the requirement, this can be achieved by creating a role in PFCG where you can restrict plant and assign this role to each user id. Your basis team can do this.
thanks
G. Lakshmipathi

How to restrict authorization for MMBE

Hi,
I need to restrict the authorization for t-code MMBE according to plant wise. Can anybody tell me about the procedure and authorization object used.
Regards

M_MATE_WRK Material Master: Plants is the object that is used to control teh display of data at plant level in tcode MMBE

BASIS--to restrict authorization for a PO document type & 122 movement type

Dear All,
Plz guide me how to restrict authorization for a PO document type & for a movement type 122 i.e. for eg. if a user has authorization for PO document type IC then he should not be able to rum movement type 122 for any T-code he runs.
Thanks in advance
Arpit
Basis

Hi,
Your request was not too clear to me.. As per my unde
Here is some details of Authorization object related to Purchase Order:
Document Type in Purchase Order( M_BEST_BSA )
Purchasing Group in Purchase Order (M_BEST_EKG )
Purchasing Organization in Purchase Order (M_BEST_EKO)
Plant in Purchase Order (M_BEST_WRK )
Document Type in Outline Agreement (M_RAHM_BSA )
Purchasing Group in Outline Agreement (M_RAHM_EKG )
Purchasing Organization in Outline Agreement ( M_RAHM_EKO )
Plant in Outline Agreement ( M_RAHM_WRK )
This can be helpfull to you to restrict authorization to PO..
In Organization Level, it can be restricted by Purchasing group, Purchasing organization and plant..
Regards,
Sandip

Restriction in MB1B tcode with ref Purchase ORDER

Dear friends,
I have one problem regarding the tcode MB1B (Transfer Posting).
Actually when i transfering with ref to Purchase order no once with all the items.
then one document no is generated and it is posted successfully.
But the issue is that once the po number with all the items is posted then it should not allow the same po no to be posted again and generate the document no.
So for this i want to write the code in some BADI or userexit.
After searching i thought the right BADI for this is MB_DOCUMENT_BADI and i have to write code in this.
But i m not getting how to write the code and also i m not sure whether this is the right BADI to make the restriction at MB1B tcode.
I m transfering goods with ref to movement type 541.
Please tell me the solution ,i willbe grateful to you and please reply immediately or as soon as possible.
Manish.

Hi,
If its a standard price in material master record...then it will pick price from material master record ...
otherwise it will pick PO's price if no valid info record exists.
It can also read last PO's price....depending upon the setting.
Brgds,
Ashok

Restrict Authorization at Material level during production confirmation

Hi SAP Gurus,
I would like to ask if its possible to restrict authorization at Material Level during production confirmation.
Our scenario is we have SFG and FG which are handled by different group of people but it has the same Order Type. Now we want to restrict authorization such as one department can only confirm SFG and the other department can confirm FG only.
Is it possible to set authorization at material type or production scheduler level. IF not possible, is there other way except creation of new Order Type?
Thanks,
Raymond

Hi Raymond,
DO you mean I should create a customized table for this?
Yes
Are there no standard way?
As per my knowledge, you can control through production order type, so you need to create seprate order type for this
Thanks,
Sankaran

How to restrict authorization for OBC4

Dear all
How to restrict authorization for obc4( field status) for user id wise
Regards
nasa

Hi Nasa
You try to use the S_TABU_LIN object. With this object you can control access to tables (called from maintenance views, SM30 etc) based on the database key for the table.
And as far as I cant see, the OBC4 transaction is just a couple of maintenance views for V_T004V andf V_T004F.
You can find a small how-to [here|http://www.mhn-consulting.com/s_tabu_lin.html]
Regards
Morten Nielsen

Restrict authorizations for loads from HR to BW for certain data

Hi,
our customer wants protect some data in the HR productive system. This data are defined/restricted by certain personal areas.
It is not enough to use reporting authorizations in BW to restrict presentation in queries or use filters in infopackets during load to avoid this data.
The requirement is to make load of such data from HR to BW absolutely impossible, even BW administrator cannot see them and must not be able to load them.
We will probably have to somehow limit ALEREMOTE users authorizations in BW. I do not know how and I even doubt, that extractors in HR source system perform authorizations checks for fields.
Is there any way to do this?
Thank you very much,
Petr

Hi Petr,
Create a general enhancement program (restricted authorization) with generic name, which should be called dynamically for every datasource.
Refer-
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/2d99121a-0e01-0010-e78c-b1ae566a2413?overridelayout=true
Not personally tested but check following.
In that program, you may try applying following logic:
1) You may need to use TYPE ANY field symbols
2) In While Loop until all fields of C_T_DATA checked, may be a counter based on total number of fields.
DELETE C_T_DATA where <TYPE_ANY1> EQ (OR use IN) specific value(s) of Personnel Area
DELETE C_T_DATA where <TYPE_ANY1> CS (Contains, check pattern) specific value(s) of Personnel Area
ENDWHILE.
Optionally: For Standard Daatsources in the same program you can add logic based on standard field only "WERKS".
Note: You may need to research on dynamic pointing using field symbols for every field.
Thanks
Arun Purohit

Remove authorization for Tcode: ME21 and ME22 from certain users

Hi Guys,
I'm new to BASIS.
My requirement is to: Remove authorization to Tcodes ME21/ME22 from a list of users.
How do I acheive this? We run on SAP 4.0B version.
Hoping to get this resolved as soon as possible.
Thanks
SAPUser

dear friend,
1.
run SU01
goto Information-Information system
select node Roles-By Transaction Assignment
type ME21, ME22
execute report
see the roles displayed
2.
then find user who have these roles (usually company uses z-roles copied from standard)
just highlight the role and hit user assignment (Cntrl-Shift-F9)
you see all users who have this role. that means they are able to run these transactions.
3.
let's remove the role(s) we found.
open second session, run SU01 type one of the user , goto Roles tab and delete the particular role you found.
save user and test it (ask hem/her to log in sap and run ME21 and ME22). if needed adjust it again (may be another role to be deleted)
say, fix completely one user/test it and then do the same things for other. test them.
good luck!

Restrict authorization in VA01 for partner function field

Hi all,
I need a way to restrict authorization in VA01/VA02 for users so that in the headers tab -> partners, the employee responsible field is locked. Other fields (i.e. ship-to/sold-to should still be changeable)
What is the best way to achieve this?
Thanks,

This is not the solution for your query to make it non modifiable. You want it on user base but if you make it non modifiable it will be in display mode for all users. But if you want to try this you can make it non modifiable in following path
Sales and distribution > Master Data > Customer Master > customer hierarchy > partner determination for sales document header.
Im not sure the exact path because i have no access of system at this time. But you can find it in above nodes.
Proper solution of your question is user exit as mentioned above.

Restriction authorization

Dear Gurus,
Users in our production system have access to t-code se38,se11.
Now we want to remove these authorizations,but these authorizations are provided to the users via diffrent roles and its difficult to track these authorizations.
I want to know that is it possible to create a restriction authorization where we can define the t-code value as 'not equal' and restrict the desired authorization
Please update
Thanks and regards
Tushar

I agree with Netweaver Expert.
If you are finding it difficult to identify those roles then I suggest that someone on your security team gets training ASAP as it it a very, very basic task to ID roles with those authorisations. You can do it in SUIM or via table AGR_1251 in less than 10 minutes.

Business Blueprint - Restricting authorization at Business Scenario

Hi All,
We would like to restrict authorizations at a Business Scenario level, say FI module users are restricted to update only their documents and only view SD documents.
Can anyone let me know if this is possible?
Thank you for your time.

Hi Guys,
Blueprints are available online!!
Go through the links
The Blue print for Business Inteligence:
http://help.sap.com/bp_biv335/BI_EN/html/Business_Blueprint.htm
Now if you are looking the Blueprint for any other modules, Select from the list
http://www.sap.com/services/servsuptech/bestpractices/index.epx
regards
Happy Tony
<b>Points == Thanks</b>

Plant level authorization control for Internal Order

Dear Sir,
We create Internal Order using tcode KO01 and being a multi plant scenario , we want to have an authorization control on Internal Order creation/change so that plant or profit-center level authorization rights can be given to the users .
We request you to Kindly guide us about the steps to be followed for addressing such requirement .
With thanks and Regards
Sonia Agarwala

Sonia-
It can be done. You have two options.
1. SAP security - when your security person can limit a user by plant, profit center etc using authorization objects.
2. Validations - Here you can create a validation where you define you logic. In your logic you can restrict set of users who can access a set of fields (profit center, plant etc). If he deviates, the system can issue error messages which is maintained in validations. Use transaction GGB0 to create validations.
Hope this helps.
Shail

Plant level authorization in DMS

Hi Gurus,
My client needs to control the document access by plant level.
In CV01N, 02N, 03N & 04N.
Is there any way to control the same document type aginst different plant.

Hi,
I would say that the best way would be to implement the BADI DOCUMENT_AUTH01 to create a special authorization check on the desired field values.
So this check should work to restrict specific users on entering document info records.
Best regards,
Christoph
P.S.: Please reward points for useful information.

Authorisation to be restrict to plant level for VA01

hi experts,
is it possible to restrict the user to plant level for the transaction VA01.
if possible authorization object for the same or some other process

I think you can maintain the same through MV45AFZZ by linking with the User name & Plant itself.
Otherwise you can maintain your own Authorization Object and assign it to User Name Profile ( through BASIS Constnt) by mentioning Plant & Activity in an Authorization Object.
Best Regards,
Ankur

To restrict authorization of tcode MEK1,MEK2,MEK3,MEK4 at plant level

Similar Messages

Maybe you are looking for