Skip to Content
Former Member
Apr 08, 2016 at 05:20 AM

Field values for Authorization object assignment


Dear Experts,

I am trying to understand how SAP behaves when there are conflicting field values are provided when accessing a T.Code.

For instance, i am trying to evaluate users having access to T.Code VA01 (Create Sales order).

As i understand, BOTH the below authorization objects are required to access VA01.

a) V_VBAK_AAT - Sales Document: Authorization for Sales Document Types

b) V_VBAK_VKO - Sales Document: Authorization for Sales Areas

I have a scenario, where the first aurhorization object (V_VBAK_AAT) has been given ACTVT value of 01 (Create), but the second authorization object V_VBAK_VKO has been given ACTVT value of 03 (Display)

In the above scenario, would be user be able to create sales order through VA01 ?

My understanding is, since the user has "Create" access to Sales document type, but only "Display" access to sales area, the user would NOT be able to create a sales order.

Kindly advise.

Thanks !