How to create authorization group to restrict a specific program

[Former Member]

Hi Experts,

I know this is a very basic question, but could not find the answer that satisfied me.

Can anyone please tell me how to create a new authorization group to restrict a specific program?

Thanks in Advance,

Parshuram

[Former Member]

Hi Experts,

I know this is a very basic question, but could not find the answer that satisfied me.

Can anyone please tell me how to create a new authorization group to restrict a specific program?

Thanks in Advance,

Parshuram

[Sandra_Rossi]

SU21

EDIT : sorry for the confusion, one term for several notions :

• SM30 V_TPGP - create authorization group for programs - assign one to a program via SE38 or to multiple programs via program RSCSAUTH
• SM30 V_BRG or V_TBRG - create authorization group for tables
• SU21 - create authorization class (and authorization object)

[deepak_sharma_sap]

Hi,

Use SU21 to create Authorisation object.(ZTEST)

Chose the value for Authorisation Field "ACTVT".

Save and Activate.

Assign that Authorisation object to one of the Authorisations of user in SUIM.

Then in you report to check if user has that authorisation check using code

AUTHORITY-CHECK OBJECT 'ZTEST' for user sy-uname ID 'ACTVT' Field '02'.

if sy-subrc = 0

"Then user can execute else not.

Endif.

Thanks

Deepak

[Former Member]

Hi Deepak,

I am talking about how to create authorization group not authorization objects.

We can create authorization object using SU21 but how to create authorization group for reports?

Could you please anyone let me know how to create authorization group for reports?

Thanks

Parshuram

[RaymondGiuseppi]

Program Authorization groups are checked in relation with Authoriztion objects S_PROGRAM, S_DEVELOP, their values corresponds to field P_GROUP of those objects. values are stored in table TPGP, text in TPGPT, values are managed with SM30.

Regards,

Raymond