HR Authorization objects

Question: We have a HR SAP system.
we are using structural authrizations partly in the same.
the requirement is like this.

our HR manager wants to give access to 3 people to all the information in SAP HR data except HR department people's information.

1.) what parameters can i use for the same
2.) what are the various authorization objects - for eg:- personnal area .
on which i can restrict the access to make this happen.

Thanks in advance

Answer:
Easiest way to this is to configure org key (on infotype 0001). Org key can be a combination of more than 1 field in infotype 0001. Let's say you populate PersAdmin + company code. Your non HR people, will have a PersAdmin value of N, your HR people have a PersAdmin value of H. In your roles you give all HR people access to N* only in org key (P_ORGIN). You non-HR people could have '*' their org key. Thus HR people cannot see other HR people, since they will not hve the org key value in their roles.

No comments:

topics