Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

user with profile SAP_ALL is not able to see the data in transaction prmd

Former Member
0 Kudos
1,082

Gurus ,

User having SAP_ALL and SAP_new authorization . But when he goes to TC:PRMD , no data is displayed .

is this requires any authorization from HR side to view the details.

if i try creating organizational assignment , message is displayed as ,

"NO authorization for organizational assignment exists "

but when i gave SU53 no object is displayed ther ....

can anyone help me ..

1 ACCEPTED SOLUTION

Former Member
0 Kudos
486

It might be that your SAP_ALL is outdated. Run report RSUSR406 to regenerate it and try again.

More likely is that you are not missing an HR authorization object, but rather a PD profile for the HR org structure as well => your consulting user ID is not meant to use this transaction and see the data.

My suggestion is to go to the key user in the HR department and go through it with them.If need be, temporary additional access can be assigned to them to look at customzing or debug the flow.

Cheers,

Julius

6 REPLIES 6

Former Member
0 Kudos
486

Hi,

Please check whether the HR objects P_ORGIN HR: Master Data & PLOG Personnel Planning are maintained correctky as these are the two objects which will be checked for authorization.

0 Kudos
486

Actually we had a user who has access to prmd , he was able to see the people 's data .

AS the person left we locked that user id and made a copy of it for another user .

but for the newly created user (exactly with the same role of the old) in PRMD no user's data is displayed .

I tried comparing both the users using SUIM also , everything is same ...

but still the new user could not access the data using PRMD

0 Kudos
486

I strongly advice to use ST01 to complete the authorization analysis and not rely completely on SU53.

/fredrik

0 Kudos
486

I completely agree with Fredrik, try running trace ST01, there are a lot of objects other than the one I suggested that are thrown like:

S_CTS_ADMI Administration Functions in the Change and Transport System

S_OC_DOC SAPoffice: Authorization for an Activity with Documents

S_OC_ROLE SAPoffice: Office User Attribute

S_OC_SEND Authorization Object for Sending

S_RFC Authorization Check for RFC Access

S_TABU_DIS Table Maintenance (via standard tools such as SM30).

I have tested with a test user with SAP_ALL profile and there is no issue I could find and all return codes were 0 when running trace.

Former Member
0 Kudos
487

It might be that your SAP_ALL is outdated. Run report RSUSR406 to regenerate it and try again.

More likely is that you are not missing an HR authorization object, but rather a PD profile for the HR org structure as well => your consulting user ID is not meant to use this transaction and see the data.

My suggestion is to go to the key user in the HR department and go through it with them.If need be, temporary additional access can be assigned to them to look at customzing or debug the flow.

Cheers,

Julius

0 Kudos
486

>

> More likely is that you are not missing an HR authorization object, but rather a PD profile for the HR org structure as well => your consulting user ID is not meant to use this transaction and see the data.

That sounds most likely. This can be checked in tx OOSB