Using Auth Groups and Auth Object to display specific fields

Question: Hello,

I am trying to figure out how to gray out certain fields a user has access to in the company code area of the customer master. I am attempting to make only 6-7 fields available to a specific role when they use a specific transaction. The transaction I am trying to restrict is FD02.

For this will I need to create a custom auth object for these fields and then tie that auth object to the transaction and the role? The only fields I want this specific role in the FD02 transaction to have access to are those fields relating to Dunning.

Any help would be greatly appreciated.

Thanks,
Matt

Answer:
Hello,

I am trying to figure out how to gray out certain fields a user has access to in the company code area of the customer master. I am attempting to make only 6-7 fields available to a specific role when they use a specific transaction. The transaction I am trying to restrict is FD02.

For this will I need to create a custom auth object for these fields and then tie that auth object to the transaction and the role? The only fields I want this specific role in the FD02 transaction to have access to are those fields relating to Dunning.

Any help would be greatly appreciated.

Thanks,
Matt


Matt
The only way you could gray out ths tabs and icons would be through the ABAP code behind it, authorization objects very less control the graying out of the fields .

Answer:
To fade out the fields in the Tcode or to give access to only few fields , we have to change to the source code ,basically use "field exit " option in the code
_________________
Thanks

Answer:
1. Define customer field group.
Logistics General -> Business Partner -> Customers -> Control -> Define and Assign field authorization groups

2. Assign all the fields you want to restrict to the field group defined above
Logistics General -> Business Partner -> Customers -> Control -> Define and Assign field authorization groups

3. Create an authorization for the authorization object F_KNA1_AEN with the corresponding field group.

4. Create a new profile with the above authorization object.

Only users who has profile can change the fields. For others, it will be grayed-out.