topic Re: Authorization - Derived roles (Organization data) in Application Development and Automation Discussions

Authorization - Derived roles (Organization data)

Former Member — Fri, 29 Dec 2006 12:35:31 GMT

The only part that will not be affected when you generate the template for derived roles is the organization data, as I know.

But I have values in objects/fields that I need to make specific for each derived rolls but these data fields does not exist at organization data. Any suggest?

Re: Authorization - Derived roles (Organization data)

Former Member — Fri, 29 Dec 2006 13:52:21 GMT

Make these fields organisational fields:

how to see sap Note 323817.

If you cannot (like field activity) than consider building more template roles

Or be sure to maintain them after every derivation manually (not recommended)

Re: Authorization - Derived roles (Organization data)

Former Member — Fri, 29 Dec 2006 14:03:28 GMT

What objects/fields are you looking for?

You can create New role with your objects/fields and assing to the user.

Make sure that in the generic role you dont maintain these values...

Cheers

Soma

Re: Authorization - Derived roles (Organization data)

Former Member — Fri, 29 Dec 2006 14:55:06 GMT

Following are 2 areas/objects that I need to customize for each roll.

Object:M_IS_WERKS

Field:MCINF

Object: K_PCA

Field: RESPAREA

Re: Authorization - Derived roles (Organization data)

Former Member — Fri, 29 Dec 2006 15:55:18 GMT

Hi,

Can you let me know what are the T-Codes you are executing.

This is to check for objects status.

Cheers

Soma

Re: Authorization - Derived roles (Organization data)

Former Member — Fri, 29 Dec 2006 16:07:00 GMT

HI Anders,

There can be two approaches for the same.

1. Include the Object into Organizational level by sap report ...dont really remmebr its name now but shd get it by PFCGORG* search...its something like OFCG add ORG Criterion ..etc...

2. In case of K_PCA we deleted the parent child role for these single roles.. and they are considered stand alone single roles... ( This is followed for us as the quantity is level and well under manageable limit.)

Hope it helps.

Br,

Sri

Award points for helpful answers

Re: Authorization - Derived roles (Organization data)

Frank_Buchholz — Tue, 02 Jan 2007 16:09:27 GMT

As already mentioned by Auke Visser:

Note <a href="https://service.sap.com/sap/support/notes/323817">323817</a> describes how to turn an ordinary authorization field into an organizational level field using report PFCG_ORGFIELD_CREATE.

Kind regards

Frank