Role PP not working properly with organizational unit (OU)

[jorge_velasquez]

Hi Experts.

We are facing and issue with PP Roles and its organizational unit (OU).

Without assigning the Plant to it in the same way it passes and shows the information.

We created then a simple Role with MF41 tx to verify.

S4HANA 2020 FPS02

Any clue?

[Bernhard_SAP]

Hello Jorge,
please explain a bit more about your problem.

Is it about the maintenance within PFCG? Or the functionality within MF41?
thx,
Bernhard

[Bernhard_SAP]

Hello Jorge,

first you have to find out, if the application checks the authority-object at all. Only then it makes sense to try to limit the access with maintaining the OU in a role. Best way - as always - create an authorization trace while executing the steps in the transaction (MF41) (you can use ST01 or STAUTHTTRACE for the trace creation).

If no authority-check is performed, you need to check with the application, if it provides the possibility to implement own checks, like an Exit, BADI, or similar.

brgds,
Bernhard