Authorization - Help. organization unit

[Former Member]

Good Afteroon,

Hello

Im working for company, we have some kind of problem, let me see if I Can explain it well:

I have many company, for example:

AAAA

BBBB

CCCC

DDDD

u2026

ZZZZ

Imagine I haver user :

JOHN

MICHAEL

PAUL

ALEX

JACK

Etcu2026.

Profiles

1) SAP_PROFILE_1: company: AAAA, BBBB user: JOHN, MICHAELu2026 (its mean john and Michael have access to company AAAA and BBBB)

2) SAP_PROFILE_2: company: BBBB, DDDD user: JOHN, PAUL, ALEX (u201C u201C)

Imagine I want to give access the company CCCC to only JOHN and PAUL, I know that I can do a profile SAP_PROFILE_3 and put company: CCCC awith John and Paul..

But I donu2019t want to create whole time new profiles for do itu2026 I want to have a simple solution of giving access the companys in profiles to user, because where I work most of time they are giving , changing, e removing access the companys to useru2026 and some have access to one or more company, I cant remove one company and create other profile with whole except where he donu2019t have access..

Anyone can help me for structure it better? Which is the best way for I can change or give access to them without creating new profiles?

Because this company has many many useru2026 we have a lot of problem..

Thank you very much

Regards

Edited by: Pheno SAP on Jun 24, 2008 1:47 PM

[Former Member]

Hi ,

You can use standard authorization objects for the same check tcode su21 and try to find a suitable one for you some of them for example can be

A_IMPR_BUK Company Codes for Investment Program Positions

A_S_WERK Asset Master Data Maintenance: Company Code/Plant

Once you add these to the profiles you just have to add the company code to this object to give authorization for that company code

Regards,

Himanshu Verma

[Former Member]

Thanks for ur answer,

the thing is

imagine i want to add company CCCC to Priofile_1 , i just wanted only John and Paul have access, and not michael...

got it?

i giving an example just for 3 users, we have more than 10 users..

thanks

[Former Member]

Hi,

The problem seems to be that the profile design does not match your requirements. It sounds like you need one profile for each company code, rather than groups of company codes.

Sadly, there's no quick and easy way of building roles.

Regards,

Nick

[Former Member]

Hi,

So what will you do you will assign this profile to John and Paul and not to the user id of michael. This profile would have the authorization object as you wnated so if you have to change this you can go and change the company code there and regenerate and that would do the trick.

Regards,

Himanshu Verma

[Former Member]

This message was moderated.