Archiving authorization

[Former Member]

Dear Experts,

    How should we provide authorization for archiving object "RL_TA", used for archiving TO data? Also for MM_EKKO used for archiving Purchase Orders.

    Thanks in advance.

Regards,

Shanthi Priya

[Former Member]

You can't do it that way!  you have to be first find the roles and subsequently profiles and assignment to the user

[Former Member]

1. For Purchase order Archiving (MM_EKKO ) use below authorization objects.

• M_BEST_EKO

• M_BEST_EKG

• M_BEST_BSA

• M_BEST_WRK

2.  For RL_TA use below authorization objects.

CON_BER_BWLVS

CON_BER_LGNU

CON_BER_LGNUM

CON_BER_TCOD

CON_BER_SFUNC

[Former Member]

Hi,

go to SUIM transaction and try to get the correct roles and authorization objects!

[Former Member]

Hi,

   I'm not aware of setting authorization. When i tried archiving using RL_TA & MM_EKKO objects, i got authorization issue and the arching process is getting cancelled. How should i clear this?

[Former Member]

go to t code SU53 and send the details to your BASIS team, they will resolve it..!!!

[Former Member]

Hi,

Using TCODE SU53, whether you can not have the authorization. you can get which object you don't have. then add this object authorization.

Regards,

Yawa

[FredericGirod]

SU53 is a bad friend.

used the authorization trace : ST01

SU53 will give you only the last authorization object checked, you can't be sure it's the one you are searching.

regards

Fred

[Former Member]

AUTHORITY-CHECK OBJECT 'S_ARCHIVE'

ID 'ACTVT' FIELD '01'

ID 'APPLIC' FIELD 'MM

ID 'ARCH_OBJ'  FIELD 'RL_TA'.

Which tables are checked when the above statement is run?

[Former Member]

go to SU21 - check the object- double click and change the permitted activities

[Former Member]

Hi kiran, please look at the attachment and let me know how i can edit it

Regards,

Shanthi

[former_member187748]

Hi Shanthi,

just click the pencil icon in the right hand side, it will take you in change mode.

Where you can change the activities.

[Former Member]

You can't do it that way!  you have to be first find the roles and subsequently profiles and assignment to the user

[former_member187748]

Hi Kiran,

he has shown that he is in the screen for maintaining the authorization objects,

from where he can do by permitted activies.

Is this not a good way ?  I wants to  know it for myself.

[Former Member]

Hi Shanti,

go to SU01 -your usr id - change - go to the roles tab : give the role SAP_BC_CCM_DATA_ARCHIVING

log of  and try

[Former Member]

No Sanjev, it will show only where used list from where the authority objct is used!

we need to maintain the authorization via PFCG txn: first need to create the role with necssary authorizations and objects.

then role will assigned to the user!

[former_member187748]

Ok Kiran,

thanks a lot for this information, because when i have used AUTHORITY CHECK concept,

these stuff was done through basis, and functional ends, i have done coding only to check.

Anyhow thanks a lot again.

[Former Member]

You welcome

[RaymondGiuseppi]

Look at help.sap.com, all required information is detailled, e.g. : Authorizations for MM_EKKO (MM-PUR) or Authorization Checks in Warehouse Management System (WMS).

Regards,

Raymond

[Former Member]

Hi,

   When i debugged the program i got sy-subrc = 4 when i ran the below statement. I dont understand it in detail. Does it check whether ACTVT = '01', APPLIC = 'MM', ARCH_OBJ = 'RL_TA'? If so which table is checked for the values for each id?

AUTHORITY-CHECK OBJECT 'S_ARCHIVE'

ID 'ACTVT' FIELD '01'

ID 'APPLIC' FIELD 'MM

ID 'ARCH_OBJ'  FIELD 'RL_TA'.

Regards,

Shanthi

[former_member187748]

Hi Shanthi,

please see this

    AUTHORITY-CHECK OBJECT 'S_ARCHIVE'

                                 ID 'ACTVT' FIELD '01'

                                   ID 'APPLIC' FIELD 'MM

                                 ID 'ARCH_OBJ'  FIELD 'RL_TA'.

    IF SY-SUBRC EQ 0.

    ELSE.

MESSAGE 'YOU ARE NOT AUTHORISED ' TYPE 'E'.

     ENDIF.

[arivazhagan_sivasamy]

Hi Shanthi,

Using this Tcode S_BCE_68001420, then click all selections in above, you can check whether particular user having authorization for this object.

If yes, sy-subrc value will be 0.

Arivazhagan S

[Former Member]

The issue is cleared. Thank you all.

Regards,

Shanthi