topic Authorization role in Application Development and Automation Discussions

Authorization role

Former Member — Wed, 22 Oct 2008 18:20:57 GMT

Hi,

Iam new to security , we are working on ECC6.0 environment.I was asked to create role which has BP transcation.

If i assign only BP tcode in PFCG , then when i enter tcode BP some screens it throws " you do not have authorization" .Is there a standard profile or authorization object or role I can use it?

- Lisa

Re: Authorization role

Former Member — Wed, 22 Oct 2008 18:24:16 GMT

If you are adding BP transaction directly on the profile, try adding on the menu and then generate the profile with suggested objects.

Regards,

Re: Authorization role

Former Member — Wed, 22 Oct 2008 18:38:50 GMT

If you are unable to add tcode to a role then you do not have authorization for it.

Make sure you authorization for pfcg for S_USER_* objects.

You can find the role names with BP transations from SUIM tcode.

SUIM->By transaction assignment.

Rakesh.

Re: Authorization role

Former Member — Wed, 22 Oct 2008 19:09:36 GMT

Lisa,

Welcome to security.....

When you add a transaction code, you need go to authorization and click on the pencil button and fill the relevant authorization objects.

Depending on the requirement you need to fill the values for authorization objects.

When you get an authorization error and if you are that you need to perform that operation then immediately take SU53 when you get the error and updated the role with those missing values for the authorization objects.

I hope this will help you and let us know if you still have issues.

Thanks,

saga

Re: Authorization role

Former Member — Wed, 22 Oct 2008 19:16:53 GMT

I Just wanted to make you clear , I know how to add the tcode in role.I wanted to know is there a standard procedure to create Bussiness partner (BP) authorization.I know BP is different than other tcodes.

Is there a standard Authorization group/profile/object can we use for BP authorization?

- Lisa

Re: Authorization role

Former Member — Wed, 22 Oct 2008 19:29:27 GMT

Hi Lisa,

Plz chk out the document in the below link related to setting up of authorization for BP.

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/0062e975-48c2-2910-e49c-8d6ad796ba21

Thanks,

Saby..

Re: Authorization role

Former Member — Wed, 22 Oct 2008 20:38:45 GMT

Saby,

the link talks about Internet sales user access CRM and does't help me any more.

Iam looking for basis authorization for BP activities and accesss

- Lisa

Re: Authorization role

Former Member — Wed, 22 Oct 2008 22:40:28 GMT

Hi Lisa,

You can check sap_bc_basis_admin to know about basis authorisations.

And regarding the role giving BP access, you can use SU53 approach as mentioned by Sagarika, or ST01 approach( if you find SU53 approach time consuming ).

Regards,

Sachhidanand Rankhambe