Authorization Question

[Former Member]

Hello All,

For one of the requirement we are in process of copying the SAP_ALL profile into a new custom role and edit all the authorization ACTVT (activity) field values to with "03 - Display ". I had generated the

newly created role.

After this If I assign this new role to a user id and go to VA03 it let me to enter the VA03 initial screen and If I select a sales order number and try to view details it is throwing the authorization error about the sales area "No authorization for displaying sales documents in 1000 10 00"

Message no. V1514

Diagnosis

According to the settings in your user master record you do not have the authorization to execute this function.

Procedure

If you need this authorization, contact the person responsible for assigning authorizations.

Authorization object: V_VBAK_VKO

I had checked the Auth. object "V_VBAK_VKO" It has those values already assigned.

What might be the issue?

Thanks for your help in advance.

Thanks,

Greetson

[former_member70391]

Hi ,

Check whether in the newly create profile under object following fields are updated.

SUIM-> Profiles-> First Radio button(profile). Enter your profile name and execute. Check the profile in the object V_VBAK_VKO

ACTVT 03

SPART 01

VKORG 1000

VTWEG 01

Enter the details accordingly 1000 10 00 in SPART, VKORG, VTWEG. Also possible that this object is not activated properly.

Thanks & Regards,

Nagaraj Kalbavi

[Former Member]

Hello Nagaraj,

I found the problem .. Problem is the role that I had copied had many inactive authorization objects inside it. But the object V_VBAK_VKO is active. I had tested it by creating another role that has only required auth. obj for sales order display and it is working fine.

I am not sure what is wrong when i blinldly replace the ACTVT field with value "03:- for display functionality for all the auth objects. Only for few objects that are inactive that I can see in the first role that I had seen.

Any hint??

Thanks,

Greetson

[former_member70391]

Hi,

Normally when you create a profile you should start from creating individual objects of it. Like S_TCODE, V_VBAK_VKO etc. Before you update these into new profile the individual objects should be active then you should add these into profile and activate.

If any one of the object is inactive then profile does not work. Also sometimes when you assign profile to the user it will not work. User has to log out and login again to the system to get it active.

You can use Su02 to make necessary changes to the profile and its object and activate it.

Hopefully it resolved your questions.

Thanks & Regards,

Nagaraj Kalbavi

[former_member70391]

HI Geetson,

Good to know that your problem is resolved. To get more informations on this check the SAP Help in the below link.

http://help.sap.com/erp2005_ehp_03/helpdata/EN/52/6715f0439b11d1896f0000e8322d00/frameset.htm

Thanks & Regards,

Nagaraj Kalbavi