SAP authorization object

[tamargegiaze]

Hi everyone,

Need urgent help; We need to maintaint authorization as per employee status; A user must view all data for active employees and maintain some data for inactive one after they change status from active to inactive.

Is there any way to achieve our goal?

Would appreciate any suggestions.

Thanks in advande,

Tamuna

[Former Member]

Hi Tamuna,

As per the short info you have provided, I assumed the problem and the solutions. If the answer not okay, please elabrote more.

you need to copy all the authorization objects in the roles and in each first auth object, you need to maintain the activites u want for 'active' employee group. And the copied the authorization objects, maintain only the required values for 'inactive' employee.

Regards

Sasitharan

[tamargegiaze]

Dear Sasitharan N,

thanks a lot for your reply, for now our requirement has changed, so we dont' need to maintaint authorization as per employee status.

thaniks again,

Regards,

Tamuna

[Former Member]

Hi Tamuna,

Although Employment Status is not in any of the standard authorization objects, it is usually reflected in the employees' Employee Group. You should check with the PA team which employee groups correspond to active employees and which to inactive employees.

Once you have this information you can use it in standard HR authorization object P_ORGIN (or P_ORGINCON if required) to authorize the corresponding access to the infotypes for each set of employee groups.

Kind regards,

Brent

[tamargegiaze]

Dear Brent Van Dyck,

Thank you so much for your reply; For now our requirement has changed, although I'll keep in mind your suugestion.

Thanks again,

Regards,

Tamuna