cancel
Showing results for 
Search instead for 
Did you mean: 

Implications of using object F_BKPF_BUP (Restricting postings using OB52 AuGr)

Former Member
0 Kudos

Hi,

Our users want to utilise the AuGr (Authorisation Group) functionality for restricting postings in OB52, by using object F_BKPF_BUP. At the moment all roles that have object F_BKPF_BUP , contain a value of '' (empty quotes) for that object

What we intend to do is either

1) Provide a value of 0001 for object F_BKPF_BUP for all roles that have it, except the role for the users who will be allowed post when the restirction is enforced
2) Then we will provide a value of 0002 for object F_BKPF_BUP only for the roles for the users who will be allowed post when the restirction is enforced. Then when the users enter 0002 in the AuGr in OB52, only these users will be allowed post against that period.

Or we can

1) Inactivate the object F_BKPF_BUP for all roles that have it, except the role for the users who will be allowed post when the restirction is enforced
2) Then we will provide a value of 0002 for object F_BKPF_BUP only for the roles for the users who will be allowed post when the restirction is enforced. Then when the users enter 0002 in the AuGr in OB52, only these users will be allowed post against that period.

At the moment we have approx 660 roles that have object F_BKPF_BUP assigned.

Other than OB52 implications, what other impact (if any) should we consider before changing the value on object F_BKPF_BUP as described in 1) above ? For what else is object F_BKPF_BUP used ?

Thanks for your help,
Jim

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi, Jim!

I've been working with F_BKPF_BUP and authorization group the way you described in your first option (items 1 and 2) and it works well. Just make sure there are no roles with "8" (asterisk) in the object F_BKPF_BUP and you will be fine.

Note that in OB52 the first period is that is opened for the Auth Group that you entered in OB52 last column. The second period is the one that is opened for everyone else.

I hope that is what you were looking for.

Former Member
0 Kudos

Hi Martha,

Thanks a lot for the response.

Our concern is that quite a lot of roles (over 600 of them) have the F_BKPF_BUP object assigned.

If we provide a value of 0001 for object F_BKPF_BUP for all those roles, are we likely to have any impact outside of OB52 ?

We want to ensure that we do not negatively impact any other functionality and/or t-codes if we update so many roles.

Thanks again,

Jim

Former Member
0 Kudos

Hi, Jim.

I've seen this configuration work with more than 600 roles with no problem - no impact other then OB52.

Thanks!

Martha

Former Member
0 Kudos

Thank you !

Answers (0)