Application Development and Automation Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

PR05 authorization object

Former Member
0 Likes
1,302

Hi,

Please tell me how can we find the authorization object for an tcode PR05.

Problem is users are able to approve their own trips in PR05 T-code. for that i want necessary authorization objects and values.

I need now for PR05 the authorization object.

Thanks

zeni

7 REPLIES 7
Read only

Former Member
0 Likes
1,004

Run transaction SU53 after you run your transaction to see the required authorization object.

Read only

0 Likes
1,004

Hi,

Basically SU53 is used to check for missing authorizations.

For example if you are prompted with you are not authorized.

once you execute SU53 you will be displayed for missing objects and what authorization are available.

Please reward points if it helps

Thanks

Vikranth

Read only

Former Member
0 Likes
1,004

Hi,

Its no like finding the authorization object for an tcode PR05.

You have to create an authorization for tcode PR05 and for creating this authorizations please follow the below steps

Tcode for Authorization Objects are,

su20----> for defineing authorization field ,

su21-----> for authorization class,

su22------> for assignement authorization object

To create an authorization object:

1) Execute transaction SU21

2) Double-click an Object Class to select a class that should contain

your new auth object

3) Click on CREATE (F5)

4) (If creating custom field) - Click the 'Field Maintenance' button -->

Click on CREATE (Shift+F1)

5) Enter the Name for the New Authorization field and the corresponding

Data Element and SAVE

6) Confirm the Change Request data for the new Authorization Field

7) Go back two screens (F3-->F3)

😎 Enter the Authorization field name and document the object:

9) SAVE and ACTIVATE the documentation

10) Save the new Authorization Object

11) Confirm the change request data for the Authorization Object and

EXIT SU21

12) Finally, the SAP_ALL profile must be re-generated

Please reward points if it helps

Thanks

Vikranth

Read only

0 Likes
1,004

Hi Vikranth,

I am facing problem in authorization checks

i have installed sap 4.7ee version on my laptop, when i am creating sales organization in IMG , I am getting messege that

No Data Maintenance authorization, disply only

how to rectify this problem

In the same way when i am creating sales order OR,

No maintenance authorization for document type OR

how to rectify this problem

Points will be rewarded for you for both the questions

Thanks

Read only

0 Likes
1,004

Hi Venkatesh,

Please proceed with the following steps.

1. Try to create the sales organization again, and once the error message displayed type /nsu53 in transaction field and execute.

2. Here in this screen you can view the missing authorization

3. You can find the authorization object and the field and activity that you donot have authorization under "The following authorizations are checked" statement

4. You need to add the corresponding fields and vlues under the authorization object.

5. You can perform this through PFCG

6.Follow the same steps for the other Tcode also

Usually this is done by Security consultants

Regards,

Prabhu K

Read only

0 Likes
1,004

Hi Prabu

Thanks, i got a messege after executing /nsu53 that

The Following autorization object was checked :

Object : S_TABU_DIS TABLE Maintenance ( Via Standard tools such as SM30)

Object Class : BC_A Basis Administration.

Now how to perform pfcg, when i execute pfcg

i am getting the screen as

Role Maintenance;

i have to enter Object or object class in the Role

Please guide me

Thanks

Read only

Former Member
0 Likes
1,004

Thanks