Authorization for material type and material views

[Former Member]

Hello all,

I would need to restrict a user group, in creation (MM01) and modification of material master, based of type material and material views.

The authorization, for each user should be:

- view, modify and create of all views, except accounting (B) for type material ZFER;

- view, modify and create of all views for type material ZOFF.

I tried to create 2 roles in PFCG with the following authorization objects:

1) M_MATE_MAR (Material Master: Material Types) ACTVT = *, BEGRU = ZFER and M_MATE_STA (Maintenance Statuses) ACTVT = *, STATM = A,C, D, E, F, G,K, L, P, Q, S, V, X, Z (excluding B)

2) ) M_MATE_MAR ACTVT = *, BEGRU = ZFER and M_MATE_STA ACTVT = *, STATM = B

but the effect is to be authorized, to all view for material type ZFER and ZOFF.

I have already updated the authorization group of the type materials (OMS2).

Is there a solution for this problem?

(component version SAP ECC 6.0)

Thanks.

Regards,

Luca

[Former Member]

Hello all,

I would need to restrict a user group, in creation (MM01) and modification of material master, based of type material and material views.

The authorization, for each user should be:

- view, modify and create of all views, except accounting (B) for type material ZFER;

- view, modify and create of all views for type material ZOFF.

I tried to create 2 roles in PFCG with the following authorization objects:

1) M_MATE_MAR (Material Master: Material Types) ACTVT = *, BEGRU = ZFER and M_MATE_STA (Maintenance Statuses) ACTVT = *, STATM = A,C, D, E, F, G,K, L, P, Q, S, V, X, Z (excluding B)

2) ) M_MATE_MAR ACTVT = *, BEGRU = ZFER and M_MATE_STA ACTVT = *, STATM = B

but the effect is to be authorized, to all view for material type ZFER and ZOFF.

I have already updated the authorization group of the type materials (OMS2).

Is there a solution for this problem?

(component version SAP ECC 6.0)

Thanks.

Regards,

Luca

[Former Member]

Hi Luca,

In both of your roles you have given the rights for "BEGRU = ZFER", you have not given the right for "BEGRU = ZOFF"

As you have mentioniond that, the other user has to get the rights for view, modify and create of all views for type material ZOFF.

Regards,

Shrinivasan. V

[Former Member]

Hi Shrinivasan,

sorry I made a mistake in transcription, my 2 roles are in fact the following:

I tried to create 2 roles in PFCG with the following authorization objects:

1) M_MATE_MAR (Material Master: Material Types) ACTVT = *, BEGRU = ZFER and M_MATE_STA (Maintenance Statuses) ACTVT = *, STATM = A,C, D, E, F, G,K, L, P, Q, S, V, X, Z (excluding B)

2) ) M_MATE_MAR ACTVT = *, BEGRU = ZOFF and M_MATE_STA ACTVT = *, STATM = B

The effect is to be authorized, to all view for material type ZFER and ZOFF.

Thanks,

Luca

[Former Member]

Hi Luca,

If you have two roles that have M_MATE_STA with values, the authorization to the user will be a combination of the values in the two roles.

Please note that the objects M_MATE_MAR & M_MATE_STA are not interlinked. You need to have seperate users and each of them has to be assigned the role seperately.

Regards,

Subbu

[Former Member]

Hi Subbu,

the problem is that the same user should be able to modify all views of type material ZFER, but must not change the view of accounting for the type material ZOFF.

Thanks,

Luca

[Former Member]

Hi Luca,

This cannot be done via authorizations. But you can do the settings in transaction OMT3E and restrict the accounting view for the material type for a particular user.

Assign Screen Sequences to User/Material Type/Transaction/Industry Sector

Regards,

Subbu

[Former Member]

Hi Subbu,

thanks for your help. I will use the transaction OMT3E, as you suggested me.

Regards,

Luca

[Former Member]

I tried to create 2 roles in PFCG with the following authorization objects: 1) M_MATE_MAR (Material Master: Material Types) ACTVT = *, BEGRU = ZFER and M_MATE_STA (Maintenance Statuses) ACTVT = *, STATM = A,C, D, E, F, G,K, L, P, Q, S, V, X, Z (excluding B) 2) ) M_MATE_MAR ACTVT = *, BEGRU = ZFER and M_MATE_STA ACTVT = *, STATM = B

- Are both these roles assigned to the same user? then your purpose is not solved, It is more or less like giving full authorization.

- One role should be

M_MATE_MAR (Material Master: Material Types) ACTVT = *, BEGRU = ZFER and M_MATE_STA (Maintenance Statuses) ACTVT = *, STATM = A,C, D, E, F, G,K, L, P, Q, S, V, X, Z (excluding B) for view, modify and create of all views, except accounting (B) for type material ZFER. This should be assigned to one user

- Second role should be

M_MATE_MAR ACTVT = *, BEGRU = ZOFF and M_MATE_STA ACTVT = *, STATM = * for view, modify and create of all views for type material ZOFF. This role should be assigned to the second user.

Regards,

Subbu