topic Re: Structural Access Restriction in Application Development and Automation Discussions

Structural Access Restriction

Former Member — Wed, 16 Jun 2010 03:55:15 GMT

G'day all.

I am wondering what are options available in SAP if we'd like to put additional user restriction base on organisation structure. I know the structural authorization but if we don't have HR module, what sort of options available in the standard SAP system?

Thanks

Re: Structural Access Restriction

Former Member — Wed, 16 Jun 2010 05:02:14 GMT

sandy,

What is stuctural access restriction?

Additional user restriction in SAP system like (SRM, CRM...

You can restrict users on personnel number ( I know you dont have HR installed)

Indirect role concept

Position based secureity

all deal with org struture.

In Ecc you can go with role base security or enabler concept

In SRM : we restrict user on org struture & even in CRM also .(for more information search for documents).

Thanks,

Sri

Re: Structural Access Restriction

Former Member — Thu, 17 Jun 2010 06:38:23 GMT

Hi Sri.

I'd like to see additional restriction base on organisation structure but we don't have HR module.

We want to restrict user access base on certain structure like organisation structure.

We only have SD, IS Retail, FI, CO. Is there any similar object from those modules where I can use as an additional restriction ? Does cost center structure works or any other structure ?

Re: Structural Access Restriction

Former Member — Thu, 24 Jun 2010 02:19:59 GMT

Hi Sandy,

In ECC( SD, IS Retail, FI, CO) we dont have any additional auth object like in HR.

You have other option restricting on org level like, Plant,Cost center,purchasing group,Purchasing org

you can also create org levels in SE38 with PFCG_ORGFIELD_CREATE.

You can restrict on custom auth objec & custom tcodes.

Maintaining USOT_C & USOX_C properly.

User level security

Role base security

Note: waste of your time restricting on additional auth check especially with ECC module. Where as Hr module is different compare with ECC

Thanks,

Sri