Maintain Authorizations

In this IMG activity you define authorizations for the authorization objects predefined by SAP if the standard authorizations do not meet your requirements.

The following authorization objects are defined for multiple transactions but are checked in the CO applications:

• Table maintenance through standard tools (S_TABU_DIS)

Protects table entries per authorization group.

In Cost Center Accounting and Cost and Revenue Element Accounting, the authorization objects are:

• KCOR (General Cost Accounting)

• KCS (Cost Centers)

Cost Center Accounting includes:

• K001 (CO Master Data)

The standard authorizations Z_CUSCO01 (Maintain) and Z_CUSCO02 (Display) include all authorization groups needed for CO Customizing.

In particular, version maintenance and planner profile definition are protected by authorization object S_TABU_DIS.

• Number range maintenance (S_NUMBER)

Protects maintenance of number ranges.

Authorization objects covering multiple applications are found in the object class "Basis - Administration".

The CO application authorization objects are found under:

• Authorizations for Cost and Revenue Element Accounting

• Authorizations for Cost Center Accounting

• Authorizations for Overhead Orders

• Authorizations for Activity Based Costing

• Authorizations for Product Cost Controlling

• Authorizations for Profitability Analysis

Standard Settings

In the standard SAP R/3 System, authorizations are provided for all authorization objects in the application.

You will find both maintenance authorizations and display authorizations for authorization objects.

The standard authorizations apply to all organization units.

Actions

1. Check whether the authorizations that come with the standard SAP R/3 System cover your needs:

a) Choose the object class of the application.

A list of the authorization objects in this class is now displayed.

b) Choose an object.

A list of the authorizations for this object is now displayed.

2. If necessary, create new authorizations as described below:

a) Select Authorization -> Create.

b) Enter the authorization and a short text.

c) Maintain the values of each field one by one.

d) Save your entries.

e) Activate the new authorization.

Note

In Release 3.1G, a new function "Profile generator" lets you create authorizations and profiles for your user.

This function makes it much easier for you to customize your authorizations. You should use this function if you are working in a new installation.

The individual configuration steps for the profile generator are described in Customizing under "Basis Components -> System Administration -> Users and Authorizations -> Maintain authorizations and profiles using profile generator".

Note on transport

You transport authorizations as follows:

1. Display the list of authorizations.

2. Select the object class.

3. Choose "Authorization - Transport".

4. Select the authorizations you wish to transport.

5. Confirm your selections and enter the correction number.

Recommendation

For reasons of performance, you should use ALL authorizations in particular for the authorization objects of planning and reporting for cost elements and cost centers.