user with profile SAP_ALL is not able to see the data in transaction prmd

[Former Member]

Gurus ,

User having SAP_ALL and SAP_new authorization . But when he goes to TC:PRMD , no data is displayed .

is this requires any authorization from HR side to view the details.

if i try creating organizational assignment , message is displayed as ,

"NO authorization for organizational assignment exists "

but when i gave SU53 no object is displayed ther ....

can anyone help me ..

[Former Member]

Hi,

Please check whether the HR objects P_ORGIN HR: Master Data & PLOG Personnel Planning are maintained correctky as these are the two objects which will be checked for authorization.

[Former Member]

Actually we had a user who has access to prmd , he was able to see the people 's data .

AS the person left we locked that user id and made a copy of it for another user .

but for the newly created user (exactly with the same role of the old) in PRMD no user's data is displayed .

I tried comparing both the users using SUIM also , everything is same ...

but still the new user could not access the data using PRMD

[fredrik_borlie]

I strongly advice to use ST01 to complete the authorization analysis and not rely completely on SU53.

/fredrik

[Former Member]

I completely agree with Fredrik, try running trace ST01, there are a lot of objects other than the one I suggested that are thrown like:

S_CTS_ADMI Administration Functions in the Change and Transport System

S_OC_DOC SAPoffice: Authorization for an Activity with Documents

S_OC_ROLE SAPoffice: Office User Attribute

S_OC_SEND Authorization Object for Sending

S_RFC Authorization Check for RFC Access

S_TABU_DIS Table Maintenance (via standard tools such as SM30).

I have tested with a test user with SAP_ALL profile and there is no issue I could find and all return codes were 0 when running trace.

[Former Member]

It might be that your SAP_ALL is outdated. Run report RSUSR406 to regenerate it and try again.

More likely is that you are not missing an HR authorization object, but rather a PD profile for the HR org structure as well => your consulting user ID is not meant to use this transaction and see the data.

My suggestion is to go to the key user in the HR department and go through it with them.If need be, temporary additional access can be assigned to them to look at customzing or debug the flow.

Cheers,

Julius

[Former Member]

>

> More likely is that you are not missing an HR authorization object, but rather a PD profile for the HR org structure as well => your consulting user ID is not meant to use this transaction and see the data.

That sounds most likely. This can be checked in tx OOSB