Restricting User

[Former Member]

Hi,

I need to restrict a user (userid) from performing a particular transaction (MM01) for a particular material type (say zr01). But the user should be able to perform MM01 for any other type of materials.

How can i achieve this?

If it gets anything to do with creating object, please let me have detail answer since i don't have strong hands on that area.

thanks,

Thushara.

[Former Member]

check <b>M_MATE_MAR</b> authorization Object where u can Restrict User .

Tcodes : Su22/Su03

for more details ask ur Basis person.

Regards

Prabhu

[Former Member]

Thanks Prabhu. Would you mind telling me where I should set the material type. Our BASIS person is not available for couple of weeks. I am trying this in a development server. If you can give me the steps, that will definitely be a great help.

Best rgds,

Thushara.

[Former Member]

Hi ,

Tcode PFCG , select the Role , in that there is option of authorization Object , put in change Mode , where u can see all the Objects , and search for M_MAT object. There u can maintain.

Regards

Prabhu

[Former Member]

Thankx Prabhu,

I don't know how to attach the material type to Authorisation group. I can create a role attaching the object M_MATE_MAR. But stucked where i should give authorisation group.

please help.

thanks,

thushara.

[Former Member]

Goto SPRO==>Logistics - General==> Material Master ==> Tools ==> Maintain Authorizations and Authorization Profiles

jothi.

[Former Member]

Authorization group is nothing but Field name , for ur requirement U have to Create New Autho.Object like Z_MTART_MAT and maintain group MTART.

and assign this one Object to Roles Manually.

Regards

prabhu

[Former Member]

Hi

Have a look at the following object..

M_MATE_MAR

Regards,

Tanveer.

<b>Please mark helpful answers</b>

[Former Member]

Hi,

with the help of Authorization object you can achieve that.You need to Contact you BAsis they will create the Object and you have to assign it to user.

Regards

vijay

[Former Member]

hi Thusara,

<b> 1 </b> All te authorizations can be controlled by 'Authorization object'.The Transaction MM01 is used in

the follwoing Roles..

MM-9001 LO-MM-9001 Logistics General Material Master

SAP_EHS_HSM_LABEL Global Label Management

SAP_EHS_SAF_LABEL Global Label Management

SAP_LE_MASTER_DATA_MAINTENANCE Master Data Maintenance

SAP_LO_MD_MM_MATERIAL_MAINTAIN Maintain Material Master Data

SAP_LO_SD_INFORMATION_PROCESSI Maintaining customer & material information

SAP_PM_EQM_PROD_RESOURC_PROC Processing of Production Resources and Tools

SAP_PS_MATERIAL Material in Projects

SAP_QM_IT_EQUI_MAINTAIN Maintenance of Test Equipment

SAP_QM_PT_LOG_MASTER_MAINT Logistics Master Data - Edit

SAP_SD_FT_ADMINISTRATION Foreign Trade - Administration

SAP_WP_HSM_SPECIALIST Hazardous Substance Manager

SAP_WP_PS_SPECIALIST Product Safety Specialist

check your User Profile in Transaction <b> SU01 </b> that which of the above roles has been assigned.Open that Role and you have to change the object.But if u go by this way you have to generate <b>derived </b>role for each of the user if each one is having different authorization.

<b> 2. </b> You can do authority check from your program.

Rgds,

Jothi.

Mark useful answers.

[Former Member]

Not complete, but ok.