Users & Authorizations in HR System

Hi all,
I have a HR system with CUA and a complex landscape... but I only need a basic functionality: only specific roles can be assigned by specific users; it means, a user could only assign limited roles to users. Anybody knows how to do it?
Thanks!!!!

Hi Hruser,
Thanks for your reply, but that's not my doubt... I know how to assign roles, but what I need is the following:
- Imagine I'm going to assign a role to an user through SU01. So, when I want to assign roles, I only can assign specific roles to that user, not all, cause the system doesn't allow me...
I need this functionality, a list of roles that each specific user can assign it. Can I do it by the customizing or another way?
Thanks!

Similar Messages

Ultiroute says "Check user authorization"

My Ultiroute has suddenly started giving me a "Please check your User Authorization" error message when I try to route a board. Ultiboard runs fine, the internal rip-up router seems to be OK, but Ultiroute won't run any more. I can't find any way of dealing with this. The software is Ultiboard 2001 SP2.
Thanks!

Hello,
You should be able to use the same Release Code if your hardware configuration hasn't changed; anyway if for some reason you have issues with this, just use the Online Release Code Generator to get a new code.
Ultiboard/Ultiroute 2001 are products that we don't support anymore, therefore I won't be able to tell you what caused this error.
Did the re-install work?
Are you using a hardware dongle?
Operating system?
Ultiboard version (Personal, Pro)?
Regards,
Fernando D.
National Instruments

Need a Query/User Authorization Report

Hello All,
I am looking for tables, function modules, programs etc that will aid in building a report that will show every query and which users have access to them.
This program I am wanting to build will serve as a periodic "reality check" on our authorizations.
I am not sure about the tables/programs etc involved in interpreting the user's roles/profiles.
My current thinking is that there may be a function module or program that is being by the BEx tools that comes up with the list of queries that the user has access to when they first select the query they want to run. Getting a hold of that would be very beneficial.
Any ideas?

Hi,
Refer the below links
www.das.state.ne.us/nis/security/docs/authorized_agent_manual.pdf
script.wareseeker.com/PHP/uas-user-authorization-system.zip/18033
eda.ogden.disa.mil/users_guide/trainMaterial/GeneralAdminMaint.ppt
www.umaryland.edu/eumb/Documents/user_aff.pdf
www.mariewagener.de/node/98
https://wiki.sdn.sap.com/wiki/display/BI/AuthorizationinSAPNWBI?focusedCommentId=78053701
www.bi-expertonline.com/downloads/Smith.doc
https://aisweb.wustl.edu/hr/benefits.nsf/pages/files/$file/hrmssecurityauth07.pdf
www.sapdev.co.uk/sap-bw/queryexit.htm
naresh

User authorization issue in portal

Hi Gurus,
I am facing a problem with a user on a portal system. The user is not able to execute a query assigned to him,
I have checked the groups and the ABAP roles assigned to him and they seem to be correct.
Intrestingly if i copy the user to create another user, the new user is able to execute the query....
Any suggestions for what might I need to check for this user...
Thanks,
Chinmaya

Please see [SAP Note 1222807|https://service.sap.com/sap/support/notes/1222807]
> Intrestingly if i copy the user to create another user, the new user is able to execute the query....
This would imply that an exclusion statement has been coded into the query as within the group of users who can start them, only a subset of the users should have a subset of the access... but the authorization concept had reached it's "limits" (at least for this implementation).
Bit of a silly idea if you ask me (in hindsight this is easy to say), although at the time it might have been considered "creative"...
Cheers,
Julius

CRM Analytics - User Authorization Not Suficient

Hi Guys,
We have implemented the CRM analytics report, however when I access the menu Sales Pro in CRM and try to open the report Closed Opportunities, I get the error : User Authorization not sufficient.
If I open the error I get the message :
Diagnosis
The user doesnot exist in the BI client or has insufficient authorizations
Procedure
Contact system administrator to verify the user is setup properly in both CRM and BI client
Procedure for System Administration
Verify that the user exist in BI client with the same user id, if not create it and assign proper authorizations as per the configuration guide.
When I run the query or the webtemplate in BW I don't have authorization problems, but I can't run from CRM.
Any suggestion about how to fix it?
Thanks in advance,
Fernando

Hi Fernando,
The report which you have implemented is doing a RFC call to BI system where some other system program is getting called which have authorization logic check for the RFC user ( or the person who is running the report). here report is terminating with error. I have face the similar issue.
generally such reports we use to schedule as a background job with batch user which have SAP ALL access but I feel in your case user who runs the report have not sufficent authorization in BI system and also you are not running report as an background job.
There aretwo tricks to findout the missing authorization which I also have used.
First option : close all the session except one in CRM and than run the report as soon as the error comes open transaction code SU53 to know the missing authorization - may be you can fail here as the authorization check fail in BI.
Second option definitely will work. Whenerror is coming double click on the mmessage to know the message detail(class and number) than again run the report in debugging mode (/H- type in address bar to activate debugging) than set breakpoint in the message and press f8( may be system will not set the break point immediately than you need to debug till the RFC calls BI system) . system will take you to the exact authorization code check where the error is coming. there you can find out the missing authorization object which is not included in the user assigned role. than can ask access team to add in the user role.
I hope this will solve your issue. Please revert with your finding.
Thanks,
Prem

What User authorization objects needed for connecting to SAP from xMII?

We eneter a SAP user and password for connecting to SAP from xMII to retrieve the metadata of the incoming IDocs.
When I specify a user with SAP_ALL user profiles, the IDocs are received properly in xMII. If I specify a user with privileges to run only certain transactions, IDocs are not received in xMII.
What user authorization objects are needed for this user to connect to SAP from xMII?
Thanks,
Sara

Sam,
I turned on the SAP System trace for this user and figured out the following auth. objects are required for receiving IDocs in xMII:
C_TCLA_BKA
S_RFC
S_CTS_ADMI
B_ALE_MAST
S_IDOCDEFT
The following auth. object is required for making JCO call to SAP from xMII:
C_AFRU_AWK
Thanks,
Sara

How to unlock users in a SAP system if all of them are locked

How to unlock users in a SAP system if all of them are locked
Posted: Mar 21, 2007 10:07 AM         Reply      E-mail this post
Hello Experts,
In any SAP System,if a user having authorizations has mistakingly locked all the users of the SAP system,then how wll we unlock those users bcoz we wont be able to logon into the SAP System. Requested to revert your valuable replies at earliest.This happened with us,how to resolve it.My Email Id is [email protected] .
Regards,
Saumya

Hello Siva And Manas,
Thanx for ur replies .
Manas: These SQL statements we hv to run at the Command Prompt level only na.......
Siva : U r telling to delete the SAP* user ,u dont mean with the System created default user SAP* rite but u mean to delete our self created SAP*/any super user rite? Secondly how to delete tat user at the database level?
Regards,
Saumya
If all the users are locked , they can only be unlocked via sql.
Actually waht happens is if the uflag field of an user in table usr02 is 0 then the user is unlocked. Different values of the uflag field in table USR02 mean:
0          User not locked
32         Locked by CUA central administrator
64         Locked by administrator
128       Locked after failed logon
Incase all the users are locked execute the following sql to unlock them
update sap<sid>.usr02   (means update sapd01.usr02 or sapq01.usr02 etc)
set uflag='0' ;
commit.;
This unlocks all the users.
update sap<sid>.usr02
set uflag='0' where bname='xxx';
commit.;
This unlocksonly the user xxx.

After deleting mozilla as part of migration to windows 7 from xp, can't reinstall as it hangs up after user authorization( flashes a message that disappears)

Tried to make some room on the hard drive by erasing the windows old folder on this computer that was created when I upgraded to windows 7 from XP. After erasing that folder Firefox no longer worked so I went to Mozilla and downloaded it again- at least the stub installer, but after running that file some message quickly pops up (too fast to read) then the user authorization comes up and I choose yes, make the changes to the system and it never gets anywhere from there. It doesn't go to the downloading screen or anything else. I have tried turning off all anti-virus and anti-malware software (Norton 360). I have removed all references in the registry and rebooting several times. I have also gone directly to the downloads folder and ran the installer as administrator and that doesn't work either. I don't know what else to try. The other browsers don't compare to Firefox. I am an ED of a nonprofit and want to support Mozilla and really need my productivity back! Please help!

Do a clean reinstall and delete the Firefox program folder before (re)installing a fresh copy of the current Firefox release.
Download a fresh Firefox copy and save the file to the desktop.
*Firefox 26: http://www.mozilla.org/en-US/firefox/all.html
if possible uninstall your current Firefox version to cleanup the Windows registry and settings in security software.
*Do NOT remove personal data when you uninstall your current Firefox version, because all profile folders will be removed and you lose personal data like bookmarks and passwords from profiles of other Firefox versions.
Remove the Firefox program folder before installing that newly downloaded copy of the Firefox installer.
*(32 bit Windows) "C:\Program Files\Mozilla Firefox\"
*(64 bit Windows) "C:\Program Files (x86)\Mozilla Firefox\"
*It is important to delete the Firefox program folder to remove all the files and make sure that there are no problems with files that were leftover after uninstalling.
*http://kb.mozillazine.org/Uninstalling_Firefox
Your bookmarks and other personal data are stored in the Firefox profile folder and won't be affected by an uninstall and (re)install, but make sure that "remove personal data" is NOT selected when you uninstall Firefox.
If you keep having problems then also create a new profile.
*http://kb.mozillazine.org/Profile_folder_-_Firefox
*http://kb.mozillazine.org/Profile_backup
*http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox
*http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Clean_reinstall

ECC 6.0 user authorizations

Hello, Is there a SAP profile available to add to all users after ECC 6.0 upgrade from version 4.7 ? This is just to avoid any major user authorization issues right after go live.

Hi,
Welcome you post on the forum.
Transfer User Authorizations from B1 to ECC 6.0, it will be mostly manual process.
There is no table hold B1 authorization data. You can only copy each user's authorization to the excel sheet.
Further more: no direct mapping available to the two system.
The best bet for you is dividing the users to the group and assign authorization based on group to save time.
Tanks,
Gordon

Non-Super User Authorization

Dear expert,
SBO only allow super user to modify the authorization. Is there any solution for non-super user to change the authorization setting.
Regards,
Kit

Kit,
Login as SuperUser,
1. Go to Administration>System Initialization>Authorization-->General Authorization.
2. Select your User -->In the right hand side window select "No user Authorizations" at the end of the window -->Give full authorization.
Let me know if this works.
Thanks
Krishna
Message was edited by:
Krishna Kishor Kammaje

-24950 ERR_USRFAIL: User authorization failed

Hello All,
I installed mini Sap in my system.
I have two entries in my host file.
1.) 127.0.0.1 localhost
2.) 10.10.0.10 computername
When i open SAP MMC and enter the user name and password in the database below the NSP with the computer name,
the error comes as -24950 ERR_USRFAIL: User authorization failed
i tried with all sorts of usr name and password please help me.

Hi Sundar,
excuse the question, but does this have anything to do with SAP NetWeaver Enterprise Search? Iwould think it does not.
All,
please post to appropriate forums!
Thanks,
Karsten

-2 ERR_USRFAIL: User authorization failed

Hello guys,
First to mention my system:
OS: Windows 2003 server
DB: MaxDB 7_7_06_17
I have one problem to connect through Database Manager to one DB instance that just now I have installed.
What I want to do is to install one MDM server.
The bellow are the steps that were already performed:
-installed Java server with sapinst (this created its database ZJD)
-after this Java server was finished installed I started to create one DB MDM instance using SDBSETUP.exe
-I was able to create this MDM instance successful
And the problem is here: This MDM database instance that was created with defaults users DBA and DBM. When the creation of this MDM was finished I tried to connect with both Database Manager and DBMCLI to MDM instance using these users but I am not able to connect. I get the   "-2 ERR_USRFAIL: User authorization failed" error. Can you tell me which is the reason?
I am sure that I typed the right user and password. I tried to uninstall all and installed again inclusive OS and the same error. I mention that to instance ZJD I am able to connect.
I tried with default users for Maxdb (DBA with pass: SECRET and DBA and DBM with pass: SECRET and DBM) but this doesn't work.
Can you help me to solve this problem?
Best regards,
Florin Radulea

Hello,
Bellow is the output for
sdbregview u2013l command:
package "DB Analyzer":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            bin/dbanalyzer.exe
IS SUBPACKAGE:        NO
DBANALYZER PATH:      E:/sapdb/programs
package "Server Utilities":
PACKAGE DIRECTORY:           e:/sapdb/programs
SOFTWARE VERSION:            7.7.06.17
PACKAGE VERSION:             0
VALID:                       YES
MODE:                        64 bit
MODIFICATION DATE:           13.04.2010
REQUIRE:                     Base >= 7.7.06.17
FILELIST:                    YES
HAS DISPLAY NAME:            NO
SCRIPT:                      YES
TEST FILE:                   bin/x_server.exe
IS SUBPACKAGE:               NO
INDEPENDENT PROGRAM PATH:    E:/sapdb/programs
package "PCR 7300":
PACKAGE DIRECTORY:        e:/sapdb/programs
SOFTWARE VERSION:         7.3.00.59
PACKAGE VERSION:          0
VALID:                    YES
MODIFICATION DATE:        13.04.2010
REQUIRE:                  Base >= 7.3.00.59
FILELIST:                 YES
HAS DISPLAY NAME:         NO
SCRIPT:                   YES
TEST FILE:                runtime/7300/pgm/libpcr.dll
IS SUBPACKAGE:            NO
PRECOMPILER 7300 PATH:    e:/sapdb/programs
package "PCR 7301":
PACKAGE DIRECTORY:        e:/sapdb/programs
SOFTWARE VERSION:         7.3.01.22
PACKAGE VERSION:          0
VALID:                    YES
MODIFICATION DATE:        13.04.2010
REQUIRE:                  Base
FILELIST:                 YES
HAS DISPLAY NAME:         NO
SCRIPT:                   YES
TEST FILE:                runtime/7301/pgm/libpcr.dll
IS SUBPACKAGE:            NO
PRECOMPILER 7301 PATH:    e:/sapdb/programs
package "PCR 7500":
PACKAGE DIRECTORY:        e:/sapdb/programs
SOFTWARE VERSION:         7.5.00.51
PACKAGE VERSION:          0
VALID:                    YES
MODE:                     64 bit
MODIFICATION DATE:        13.04.2010
REQUIRE:                  Base >= 7.5.00.51
FILELIST:                 YES
HAS DISPLAY NAME:         NO
SCRIPT:                   YES
TEST FILE:                runtime/7500/pgm/pgm64/libpcr.dll
IS SUBPACKAGE:            NO
PRECOMPILER 7500 PATH:    E:/sapdb/programs
package "Webtools":
PACKAGE DIRECTORY:    e:/sapdb/programs/web
SOFTWARE VERSION:     7.6.03.09
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              ODBC >= 7.6.03.09 64
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/webdbm.dll
IS SUBPACKAGE:        NO
WEBTOOLS PATH:        E:/sapdb/programs/web
package "SAP Utilities":
PACKAGE DIRECTORY:           e:/sapdb/programs
SOFTWARE VERSION:            7.7.06.17
PACKAGE VERSION:             0
VALID:                       YES
MODE:                        64 bit
MODIFICATION DATE:           13.04.2010
REQUIRE:                     Base >= 7.7.06.17
FILELIST:                    YES
HAS DISPLAY NAME:            NO
SCRIPT:                      YES
TEST FILE:                   bin/dbmrfc.exe
IS SUBPACKAGE:               NO
:                            E:/sapdb/data
INDEPENDENT PROGRAM PATH:    E:/sapdb/programs
package "Redist Python":
PACKAGE DIRECTORY:     e:/sapdb/programs
SOFTWARE VERSION:      7.7.06.17
PACKAGE VERSION:       0
VALID:                 YES
MODE:                  64 bit
MODIFICATION DATE:     13.04.2010
REQUIRE:               Base
FILELIST:              YES
HAS DISPLAY NAME:      NO
SCRIPT:                YES
TEST FILE:             bin/x_python.exe
IS SUBPACKAGE:         NO
REDIST PYTHON PATH:    E:/sapdb/programs
package "Base":
PACKAGE DIRECTORY:           e:/sapdb/programs
SOFTWARE VERSION:            7.7.06.17
PACKAGE VERSION:             0
VALID:                       YES
MODE:                        64 bit
MODIFICATION DATE:           13.04.2010
REQUIRE:
FILELIST:                    YES
HAS DISPLAY NAME:            NO
SCRIPT:                      YES
TEST FILE:                   pgm/dbmcli.exe
IS SUBPACKAGE:               NO
INDEPENDENT DATA PATH:       E:/sapdb/data
INDEPENDENT PROGRAM PATH:    E:/sapdb/programs
package "JDBC":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.6.06.05
PACKAGE VERSION:      0
VALID:                YES
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            NO
IS SUBPACKAGE:        NO
JAVA DRIVER PATH:     E:/sapdb/programs
package "Messages":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     MSG 0.7732
PACKAGE VERSION:      0
VALID:                YES
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            NO
IS SUBPACKAGE:        NO
MESSAGES PATH:        E:/sapdb/programs
package "ODBC":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/sdbodbc.dll
IS SUBPACKAGE:        NO
ODBC PATH:            E:/sapdb/programs
package "SQLDBC 77":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Database Connectivity >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/libSQLDBC77.dll
IS SUBPACKAGE:        NO
DBC PATH:             E:/sapdb/programs
package "Database Kernel":
PACKAGE DIRECTORY:    f:/sapdb/mdm/db
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Server Utilities >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/kernel.exe
IS SUBPACKAGE:        NO
DEPENDENT PATH:       f:/sapdb/mdm/db
PACKAGE DIRECTORY:    e:/sapdb/zjd/db
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Server Utilities >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/kernel.exe
IS SUBPACKAGE:        NO
DEPENDENT PATH:       e:/sapdb/zjd/db
package "Loader":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Redist Python >= 7.7.06.17
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            bin/loadercli.exe
IS SUBPACKAGE:        NO
LOADER PATH:          E:/sapdb/programs
package "SQLDBC":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Base
FILELIST:             YES
HAS DISPLAY NAME:     YES
SCRIPT:               YES
TEST FILE:            pgm/libSQLDBC.dll
IS SUBPACKAGE:        NO
DBC PATH:             E:/sapdb/programs
package "SQLDBC 76":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.6.06.07
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              Database Connectivity >= 7.6.06.07
FILELIST:             YES
HAS DISPLAY NAME:     YES
SCRIPT:               YES
TEST FILE:            pgm/libSQLDBC76.dll
IS SUBPACKAGE:        NO
DBC PATH:             E:/sapdb/programs
package "Fastload API":
PACKAGE DIRECTORY:    e:/sapdb/programs
SOFTWARE VERSION:     7.7.06.17
PACKAGE VERSION:      0
VALID:                YES
MODE:                 64 bit
MODIFICATION DATE:    13.04.2010
REQUIRE:              SQLDBC 77
FILELIST:             YES
HAS DISPLAY NAME:     NO
SCRIPT:               YES
TEST FILE:            pgm/libSDBLoader.dll
IS SUBPACKAGE:        NO
FASTLOAD PATH:        E:/sapdb/programs

Assigning authorization in CUA system

Hello,
We are having CUA( Central User Administration) in our system. The requirement now is to create a program and through the program assign roles to the users who requested for the roles.
I found a bapi "BAPI_USER_LOCACTGROUPS_ASSIGN" which does the purpose but i am stuck at two issues:
1. This BAPi deletes the existing roles of the user and adds only our mentioned role. I want to add role to already existing roles of the user.I couldn't find any BAPI which adds the role to the existing one.
2. The most important issue here is the authorization. The requirement of the authorization should not be user specific. For example: If i execute the report and want to approve few requests then even if i do not have authorization to execute the bapi or in other words i do not have authorization to change or delete existing roles i still need to add the role to the user.
Let me explain in detail : If userA wants a request for a role. I log in to the program and find out that user A has asked for the rquest.If certain conditions are satisfied then i can give User A the access to the role and add the role to his user data. Even if i do not have authorization to assign roles i still want the role to be added to User A. How can i achieve this? Can we have some commom user name ( For example: Common name for batch processing) to do this ? I am not aware how to achieve this requirement? Please help.
P.S : I am aware that this kind of requirement is a security breach but this is what the client requirmenet is .
Regards,
Vaishnavi

Hi Vaishnavi,
Yes you are correct. It will delete the existing roles. Hence the sequence should be as follows :-
1. Call 'BAPI_USER_GET_DETAIL' to get all the current roles of the user
2. Call 'BAPI_USER_ACTGROUPS_DELETE' to delete & re-add the roles
3. Call 'SUSR_BAPI_USER_ACTGROUPS_ASSIG' to reassign the old + new roles
Thanks,
Best regards,
Prashant

User Authorization don't work in MD01.

Hi!
I created the role with transaction MD01 only.
System generated two Authorization Objects:
1. S_TCODE - Transaction Code Check at Transaction Start:
MD01
2. M_MTDI_ORG - Organizational Levels for Material Requirements Planning:
MRP Controller (Materials Plan...
Activity types in materials pl MRP: total planning
Plant Unmaint. org. level
Next, I can don't write values of "Plant" or "MRP controller" in Authorization Objects M_MTDI_ORG. I can even delete Authorization Objects M_MTDI_ORG!
But the user with this role(only this) still can not only open MD01, but successfully complete planning. For any Plant or MRP controller.
Why it don't work? What i can do? I need to limit user authorization and i don't want to create Z-transaction for it
Thank you
Best regards,
Evgeniy

Hi, Caetano!
The Note contains only MDBT. But apparently, MD01 is also included in this rule.
If you use a user-exit M61X0001, a user must choose the user key in the selection screen. And user can change it. It's not what i need.
Thanks for your reply!
Best regards,
Evgeniy

Regarding Making user authorization matrix

Hwello Friends,
Can anybody tell me the user authorization matrix for sap system ? How can we make and how to make profiles and roles. i know the transaction. but does sap or other documents for this ? plz send me or guide me. waiting for ur reply.send me some link if any or material links. or send me material on my id. [email protected]
Thanks
Deepak

Hi, Deepak!
As your question is quite general - which kind of SAP system? ECC? Portal? PI? - I' m doing a little hard with concrete answers. Probably you' ll find some infos under <a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/81/0e0f61b566dc44bbb4055b3ccd25be/frameset.htm">Identity Management</a>. If that' s not what you' re looking for, let me know!
Regards,
Thomas

Users & Authorizations in HR System

Similar Messages

Maybe you are looking for