Question: in the documentation i have been reading i only found references pointing
towards the use of HR structural authorizations to control access to HR
relevant data.
does the HR structural authorization concept allow to control access to
Controlling objects such as Cost Center and Profit Center objects?
if not, how to allow the access to a certain Cost Center by USER1 from
department A but not from USER2 from department B? many thanks in
advance for your comments.
daniel
_________________
Not a SAPfans member yet? It takes less than 1 minute Here!
"Act as if the maxim of your action were to become through your will a universal law of nature." K.
Answer:
HR structural authorization does control certain aspect of Controlling and SD only as it relates to HR. Cost Center and Profit Center are not part or HR and they have their own hierarchy. Cost center and profic center contorl is primarily controlled with K_REPO_OPA, K_CCA and K_PCA. But there are fewer controls on CO and PC than you would like.
Answer:
got some more insites from SAP in this front that think could be useful:
**************
Dear Daniel Pereira,
The access with help of structural authorizations can be controled for
HR-objects and with some exceptions for so called 'external' objects as
well. Unfortunately not for cost centers.
Kindly ask you to review the info below which will be able to explain this
much better than I am able to. Note that the application responsible for
the object-type has to control the access. It is not in the scope of
HR-authorizations to control the access to external object-types.
***
Symptom
a) It is not clear how and whether external object types (external
in the sense of Organizational Management) can be included in the
structural authorization check.
Cause and prerequisites
You use structural authorization profiles and want to know if and to
which extent other than HR object types can be taken into account here.
Solution
a) External object type 'P' for person is completely integrated in
the structural authorization check; for example, you can use
profiles with the evaluation path O-S-P to restrict the access of
a certain group of personnel numbers; external object type 'AP'
is also included in the structural checks according to table
T77PR since Release 4.6A.
The access of further external object types (for example, K for
cost center cannot be restricted by means of structural profiles;
external object types can only be included in the structural
checks under the following prerequisites:
In addition to a relationship to an object of Organizational
Management, the external object type must also have a corresponding
inverse relationship; you can determine from table T77EO which
external object types have inverse relationships. If field INREL is
flagged, the object type has an inverse relationship in the standard
system.
The key structure of the external object must be of type 'NUMC 8'.
This way, the prerequisite is met to store concrete object IDs for
the object in table T77PR in the 'ID' field. You can determine from
Transaction SE11 which key structures meet this prerequisite.
Example: in structure PKEYS, the relevant data element is defined
with type 'NUMC 8', the external object type 'WS' has this structure
and an inverse relationship and consequently, it can be included in
the structural checks.
***
How to Earn Rs.25000 every month in internet without Investment?
HR structural authorization to control access to CO objects?
Labels:
Sap HR - Faqs
Subscribe to:
Post Comments (Atom)
topics
-
▼
2007
(1406)
-
▼
November
(1359)
- Free Download SAP FI Certification study pdf books
- Implementing SAP R/3 on OS/400
- Update SAP Kernel in UNIX based
- Security Audit Log (BC-SEC).pdf
- Security Audit Log.pdf
- Securities,pdf
- Secure Store & Forward / Digital Signatures (BC-SE...
- Secure Network Communications (BC-SEC-SNC)
- Free download use ful T-codes
- I did not find any OSS notes appropriate for my pr...
- How to apply OSS notes number?
- What is OSS Notes number?
- Where can i access SAP OSS?
- WHAT IS OSS
- Disaster Recovery Plan to Restore Production System
- Steps to Install SAP Note in sap
- Difference Between SAP Notes and Support Package
- Question : Subject : Support packages testing
- Five Different "User Type"
- How to solve the Time Zone Definition Problems?
- Setting the User Decimals Format
- Schedule Manager
- Various Important SAP Basis T-Code
- Trace Functions in sap
- System Trace: Error Analysis in sap
- System Trace(ST01) in sap
- Roles and Authorizations Used in Background Proces...
- Deleting Multiple Spool Requests Simultaneously in...
- Logging and Tracing in spool
- Print and Output Management in spool
- Background Job Monitoring Monitor in CCMS
- Monitoring the Database Using the Alert Monitor
- Monitoring the Operating System Using the Alert Mo...
- Monitoring Memory Management Using the Alert Monitor
- Method Dispatching Monitor in CCMS
- Remote Application Server Status Monitor in CCMS
- GRMG Self-Monitoring Monitor in CCMS
- CCMS Selfmonitoring Monitor for System-Wide Data i...
- Logfile Monitoring Monitor in CCMS
- Logon Load Balancing Monitor in CCMS
- Transaction-Specific Dialog Monitor in CCMS
- Workload Collector Monitor in CCMS
- System Errors Monitor in CCMS
- System Configuration Monitor in CCMS
- Syslog Monitor in CCMS
- Spool System Monitor in CCMS
- Security Monitor in CCMS
- Performance Overview Monitor in CCMS
- Operating System Monitor in CCMS
- Filesystems Monitor in CCMS
- Entire System Monitor in CCMS
- Monitoring the Enqueue Service in CCMS
- Dialog per Application Server Monitor in CCMS
- Dialog Overview Monitor in CCMS
- Database Monitor in CCMS
- Transactional RFC and Queued RFC Monitor in CCMS
- Communications Monitor in CCMS
- Buffers Monitor in CCMS
- Background Job Monitoring Monitor(CCMS)
- Background Processing Monitor(CCMS)
- Availability and Performance Overview Monitor (CCMS)
- SAP CCMS Monitor Templates Monitor Set
- Creating and Changing a Monitoring Pause(CCMS)
- Creating and Changing Monitoring Rules(CCMS)
- Configuring Availability Monitoring(CCMS)
- Update Repositories(CCMS)
- Displaying Central Performance History Reports(CCMS)
- Displaying Report Properties
- Scheduling and Executing a Report
- Variables in Group Names
- Creating a Report Definition(CCMS)
- Maintaining Collection and Reorganization Schemata...
- Maintaining Collection and Reorganization Schemata...
- Creating and Editing a Calendar Schema(CCMS)
- Creating and Editing a Day Schema
- Customizing the Alert Monitor(CCMS)
- Resetting MTEs and Alerts(CCMS)
- Reorganizing Completed Alerts(CCMS)
- Display Completed Alerts(CCMS)
- Automatically Complete Alerts(CCMS)
- Completing Alerts(CCMS)
- Starting Methods (CCMS)
- Processing Alerts(CCMS_
- Displaying the Technical View: Central Performance...
- Displaying the Technical View: Threshold Values(CCMS)
- Displaying the Technical View: Status Autoreaction...
- Displaying the Technical View: Status Data Collector
- Displaying the Technical View: Method Allocation
- Displaying the Technical View: Info on MTE
- Display Types and Views of the Alert Monitor(CCMS)
- Properties of Status Attributes (CCMS)
- Properties of Performance Attributes(CCMS)
- Properties of Log Attributes (CCMS)
- General Properties of Monitoring Tree Elements(CCMS)
- Properties of Monitoring Objects and Attributes
- Elements of the Alert Monitoring Tree
- Alert Monitoring Tree(CCMS)
- Monitors(CCMS)
- Monitor Sets (CCMS)
- Elements of the Alert Monitor (CCMS)
-
▼
November
(1359)
No comments:
Post a Comment