SAP Public Cloud - Authorization setting for separate right of Post Goods Receipt App

[yannichan]

We are testing on Public Cloud Authorization setting using Maintain Business Role App

Role designed to contained rights below:

-> create/change/display purchase requisition in Create Purchase Requisition App

-> create/change/display purchase order in Create Purchase Order App

-> only display material document in Post Goods Receipt App

-> only display material document/ service entry sheet in Manage Service Entry Sheet App

However, we found that for Post Goods Receipt App and Manage Service Entry Sheet App, cannot control to only display. We only can find IAM Apps below:
-> Post Goods Receipt (Transaction Code: MIGO_GR)

-> Manage Service Entry Sheet / Display Service Entry Sheets (Transaction Code: F2027)

is there any other business catelogs and IAM App required to maintain? As the Access Categories will control entire role Write and Read.

Because like Purchase Order, it contained two apps to perform create/change/display.

-> Create/edit: Create Purchase Order App

-> Display: Display Purchase Order App

Thank you!

[erickgoulardt]

Dear Colleague, I hope you find yourself well! Thank you for joining the community. As soon as possible, a technical expert will contact you to clarify your question. I am adjusting the tags to redirect the issue to the right team. Best Regards, Erick Goulardt SAP Support

[George_Yu]

Hi @yannichan ,

If I understand correctly, you find a standard app such as "Create Purchase Order" which can be used to change/create a PO. However, you want a similar app as only displaying the PO, such as "Display Purchase Order".

Not all "Create" apps have their siblings of "Display" apps. 

To control the access to the data, you can use the Restrictions to display the data only even in the "Create" app. You can find details in my blog https://community.sap.com/t5/enterprise-resource-planning-blog-posts-by-sap/using-restrictions-to-en.... 

Regards,

George