Role authorization for FAGLB03

[john_pietrowski2]

I am trying to create a role the only contains FAGLB03 and I would like to be able to restrict which accounts and comany(s) the user can see. When I create the role there are no authorization objects associated with FAGLB03 so I cannot restrict it. Is it possible to do this, and if so how?

[Sri_S1]

Hi John,

FAGLB03 transaction is same as FS10N, Add FS10N instead of FAGLB03.

Thanks,

SS

Edited by: sun on Aug 23, 2010 8:57 PM

[john_pietrowski2]

this is great, but it only allows me to restrict by company, so I am half way there.

[Sri_S1]

Hi John,

you need to maintain Values in SU24 , if you want to see them inside the role.

Thanks,

SS

[john_pietrowski2]

Could you give me specifics for restricting accounts also. I am new at this, and I have never worked with SU24

[Sri_S1]

Hi John,

Go to SU24 and type in transaction FS10N and activate the ones you need. inorder to know what needs to be activated run the transaction and see what object it is checking and activate those in SU24.

Thanks,

SS

[Former Member]

Enable the below objects for company code related fields

in SU24 for transaction FAGLB03

F_BKPF_BUK

F_SKA1_BUK

also follow the instruction regarding how to use SU24, as posted by others

[Former Member]

Note that F_SKA1_BUK (and more likely F_BKPF_BES in this case) is only exclusive if you have protected the master record.

If you have not, then it is an "optional" object as documented in SU21 - the check is suppressed.

So, the intention is to protect accounts at the master record level and only then can you grant access selectively.

Cheers,

Julius

[Former Member]

Also note that PFCG recognized Su24 proposals of parameter transactions. If not found in the calling tcode, the parameterized tcode will be evaluated for proposals.

So you need to make a decision here as well (from the view of the role build).

It is an art form...

Cheers,

Julius

[Sri_S1]

Hi John,

go to"A collection of threads: FAQ's, intros and memorable discussions " in this forum and you will find good documentation on SU24

Thanks,

SS