Restricting user role based on document type

[jasmineshieh]

^Hi,

^{I need to restrict user to create for PR and PO by the Purchasing organization and Plant, but this user should be able to create and edit intercompany STO for all the Purchasing organizations and Plants within the system.}

^{I have tested with a user of 2 roles:}

1. restricted to purchase organization/company code ‘6110’ with only authorization to document type ‘NB’.

2.unrestricted to organizational units with only authorization to document type ‘UB/UD’.

However the user is now able to create document types NB/UB/UD for all organizational units.

Does anyone know how to restrict a user with such scenario?

Thank you.

[GeovanaLettnin]

Adjusting tag to "SAP S/4HANA Cloud".

[GeovanaLettnin]

We helped you to accept the answer, since there were no updates after 7 days.

You can unaccept it anytime if you have further questions.

[SunnyZ]

Hello there,

Hope you are well.

We are currently facing the same/similar problem of not able to resctrict the Contract Types dropdown list via maintaining authroizations in the Manage Purchase Contract app.

Wondering if you have come up with a solution for the problem you raise with? If so, how did you handle it?

Thanks,
Sunny

[Evol · Accepted solution]

Hi Jasmine,

For testing purposes, please try to assign only the minimum role/s required for the user to create the purchase orders. Make sure that those roles contain the organizational related authorizations that you need. Hope this helps.

-Evol

[Evol]

Hi Jasmine,

You can restrict a purchasing role to both purchasing document type and purchasing organization/company code.
First you have to copy the standard role for purchasing and create 2 custom roles containing those 2 different restrictions under the Restriction & Values. For the section where you've created two roles yet the restrictions are not functioning as intended, please verify that any additional roles assigned to the user, which include organizational units as restriction values, are also configured to have their org units restricted according to your requirements.

*Company Code is not in the screenshot but it can also be restricted same as Doc Type and POrg.

Hope this helps.

[jasmineshieh]

Hi Evol,

I tested exactly to your solution, but it does not work.

I have this one user that has Role 1 & Role 2 assigned, and no other roles assigned.

This is the restriction:

Role 1:

Role 2:

This user is however, able to create NB document for every organization. I want to restrict this user to only be able to create for Purchasing org and company code 6110.

Is there something I am missing in the restriction?

Thank you.