cancel
Showing results for 
Search instead for 
Did you mean: 

roles and authorization

Former Member
0 Kudos

Hi,

In co02 transaction, for the below screenshot, for the rounded one; user is asking to provide the authorization for the List of persons. The same thing i forwarded to Basis person. Then He has asked me Provide the role for the mentioned activities and transaction-co02. Then i have searched in suim transaction and provided the role. Then He has replied as "This is not correct object for providing the authorization". Please guide me the way how to give the correct object for the rounded activities.

Regards,

Mastan.

Accepted Solutions (0)

Answers (5)

Answers (5)

former_member215345
Active Participant
0 Kudos

Hi Mastan,

You can control the user statuses using authorization keys as specified above.

Goto tcode CRMBS02 > select the "Status Profile" for you user statuses > Then create authorization keys corresponding to each statuses.

Assign this authorization keys to respective users using objects B_USERSTAT and B_USERST_T.

Thanks and regards,

Jayadeep

Former Member
0 Kudos

Hi Mastan,

as Rajen mentioned check that user status authorization objects in relevant production order maintanence role in suim. Also if you know some relevant user roles then open the role in PFCG and then search for this authorization object. If not present in any roles then ask your basis consultant to add manually this role in relevant role. You need to give appropriate values like activity and user groups. This authorization will come into picture during order maintanence or other activities where user status in set or delete automatically or manually.

goodluck

RIjil

former_member208398
Active Contributor
0 Kudos

Mastan,

I responded to one of your similar thread. but could not understand your requirement in detail.

Please look into the authorization object B_USERSTAT if you have authorization keys in the user status profile.

Best Regards,

Rajen

Former Member
0 Kudos

Hi Rajen Madan, sukamana putra, suresh,

In the above screenshot,the rounded one : first activity : ROS under creation, i want to give some x1,x2,x3,x4 user ids and quality approved, y1,y2,y3,y4 user ids like that i want to give authorization for each activity. For PP some roles are already defined. My quistion is for which suitable role these user ids can assign. weather suitable roles defined or not. or i have to create a new roles for this. And what is the authorization object ? Please guide me.

@ Madan : For the qm approval user list in user status thread; i can come with clear requirement.

Regards,

Mastan.

Former Member
0 Kudos

Hello Mastan,

To map your requirement you will need to have separate role for each set of user IDs. In the above example to restrict the first activity to set of users you need to define role comprising CO02 with authorization field 'Authorization key' in the authorization object 'B_USERSTAT'. This object will be added to the above role manually.

So for every activity, separate role which are almost identical to each other EXCEPT the input value for authorization key.

To maintain the authorization key in the user status or status profile, use T code BS02 & give input for authorization key in the extreme right.

Please refer my reply on the other similar thread for more clarification.

http://scn.sap.com/thread/3474626.

Hope this helps

Regards

Mangesh

former_member206498
Contributor
0 Kudos

Hi Mastan,

I think you Basis guy is asking for authorization key for each user status. Go to BS03 transaction and enter the user status profile "ZPROD." Scroll to the right to find the authorization key for each status.

You can maintain the authorization key in BS52 transaction.


Regards,

Julian

Former Member
0 Kudos

Hi,

There are 2 different status will be there in the order. One is system status, it will be updated automatically based on the progression of the order. We cant do anything. second thing is user status, this we can change manually, based on the progression of the order. This we can control through the authorisation object. There is no seperate authorisation object for this, with the order change authorisation only we can control, may be based on the order type with user combinations we can control more precisely.

Regards,

V. Suresh