Security Profiles in Roles

[former_member206388]

Hi,

I want to enable only selective material types/material groups in my create screen.

Can I create authorization profile and assign the specific material type/material groups to the role so that only those details will be available in the drop down list?

Does this works or should I need to create BADI for each role and update there?

Thanks

Bala

[former_member206605]

Hi

Yes..you can do this. You have to create multiple CR types with the combination of material type + groups and then in the role, assign those CR types. This way you can restrict at security level.

Kiran

[Former Member]

Use the standard authorization group objects that are used to control material type authorizations for transactions MM01, MM02, & MM03. These work the same way with MDG. You don't need to develop or implement any BAdI.

[vpawate]

I thought I had this straight in my head, I may be wrong.  So here is what's happening :

We've created a role copied from the MENU role from SAP - this has all the MM related authorization objects.

We are testing a Accounting Specialist role using MAT02 CR type. This role  should have change access only to the Accounting and Costing views on the MM (M-MATE_STA = B&G) for one plant. The plant value also has been added in M_MATE_MAT.

When we try to change a material via MDG - the expectation is to see ONLY the fields related to Accounting & Costing editable and the rest greyed out .  But what we are seeing is the Basic Data UIBB  and the Forecasting UIBB is editable.

Are we doing something wrong or is anything more that needs to be done ?

Any thoughts on why we are observing this ?

-Vinay

[Former Member]

Check out restrictions in point # 13

https://launchpad.support.sap.com/#/notes/2129261/E