topic Restrict data based on company code in DevOps and System Administration Forum

Restrict data based on company code

former_member708377 — Sun, 01 Nov 2020 17:10:37 GMT

Hi experts,

I have two company code, let's assume code A and code B. Also I have 2 user user Alpha and Beta.

My question is, is any way possible to restrict user Beta to see all data, more precisely user Beta can only see data from company code B.

Thanks in advance,

Best regards,

Milos

Re: Restrict data based on company code

armandocappello — Mon, 02 Nov 2020 00:53:28 GMT

Hi Milos

as you are not describing which data you want to segregate, I would say build the roles for use beta assigning Company Code Authorization Objects values = B

i hope it helps

Re: Restrict data based on company code

S_Sriram — Mon, 02 Nov 2020 05:56:38 GMT

Hi Milos.

Depending on your SAP system, we can create custom roles to display either all the data or any one of the company code, from the question is not clear about your requirement.

Could you share more details?

Regards

Re: Restrict data based on company code

former_member708377 — Mon, 02 Nov 2020 08:19:41 GMT

Thank you a lot for help,

Our DEV team build custom app on system (app use data from SAP tables and views like ACDOCA, MATDOC in external applications.).

And we have 2 Company assign, but all user can see all data from both company, (in financial main book from both company).

We trying to separate data on concept based on company code (I am not sure that is a correct scenario) I am created custom role and gave authorization from organizational unit only for one company code, assign to user only this role, but no result here.

Thanks,

Best regards,

Milos

Re: Restrict data based on company code

armandocappello — Sat, 07 Nov 2020 01:06:20 GMT

Hey Milos

can you paste the sap help link that describe company financial main book

For the authorization troubleshooting you have transaction ST01 with Authorization check flag, run it against the test user which has assigned the company code segregated role and replicate the access