Authorization - Derived roles (Organization data)

[Former Member]

The only part that will not be affected when you generate the template for derived roles is the organization data, as I know.

But I have values in objects/fields that I need to make specific for each derived rolls but these data fields does not exist at organization data. Any suggest?

[Former Member]

Make these fields organisational fields:

how to see sap Note 323817.

If you cannot (like field activity) than consider building more template roles

Or be sure to maintain them after every derivation manually (not recommended)

[Frank_Buchholz]

As already mentioned by Auke Visser:

Note <a href="https://service.sap.com/sap/support/notes/323817">323817</a> describes how to turn an ordinary authorization field into an organizational level field using report PFCG_ORGFIELD_CREATE.

Kind regards

Frank

[Former Member]

Hi

What objects/fields are you looking for?

You can create New role with your objects/fields and assing to the user.

Make sure that in the generic role you dont maintain these values...

Cheers

Soma

[Former Member]

Following are 2 areas/objects that I need to customize for each roll.

Object:M_IS_WERKS

Field:MCINF

Object: K_PCA

Field: RESPAREA

[Former Member]

Hi,

Can you let me know what are the T-Codes you are executing.

This is to check for objects status.

Cheers

Soma

[Former Member]

HI Anders,

There can be two approaches for the same.

1. Include the Object into Organizational level by sap report ...dont really remmebr its name now but shd get it by PFCGORG* search...its something like OFCG add ORG Criterion ..etc...

2. In case of K_PCA we deleted the parent child role for these single roles.. and they are considered stand alone single roles... ( This is followed for us as the quantity is level and well under manageable limit.)

Hope it helps.

Br,

Sri

Award points for helpful answers