Skip to Content

Authorization: Allow intercompany processing in Sales

Mar 15, 2017 at 06:41 AM


avatar image

we require now a certain amount of intercompany sales activity and are having a problem to allow some transactions in another Sales Area.

For example we would like a user who has sales role X_SD_02_VKORG_1510_12_ORDERS containing the main sales transaction (VA01 VA02 etc.) to be able to create quotations for Sales Areas 1400 1300 etc.

Creating a test role X_SD_99_VKORG_1XXX_QUOTATION with VA21, VA22 and VA23 (quotation trx) when we add this to the 1510 user we find that the user can change orders in the other companies.


Standard Sales Document: Authorization for Sales Document Types V_VBAK_AAT

Activity 01, 02, 03, 05, 06, 24, 25, 43 ACTVT

Sales Document Type ZQT, ZQTB AUART

Standard Sales Document: Authorization for Sales Areas V_VBAK_VKO

Activity 01, 02, 03, 06, 24, 25 ACTVT

Division 10, 11, 12, 20 SPART

Sales Organization 1100, 1200, 1300, 1340, 1400 VKORG

Distribution Channel * VTWEG


This seems to be because the objects V_VBAK_AAT & V_VBAK_VKO are the main controlling objects for all of the VAxx transactions.

Another example of our requirement is to allow a user with the main sales role in a particular Sales Area to create a Scheduling Agreement (VA31) in another Sales area.

The only solution we can think of at the moment is to create our own authorization object (something like a combination of V_VBAK_AAT and V_VBAK_VKO) and use this in user exits, this would be a time consuming process and we are not sure that this is the correct approach to take.

Is there a simpler way to allow a user in one Sales area to have a limited number of transactions in another sales area?

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

4 Answers

Mark O'Donnell Mar 20, 2017 at 12:59 PM

Hello Rupesh,

we are talking about one user. The roles have already been created and tested before the question was asked. It seems it is not possible to give VA01 and VA02 in one Sales Org. (1510) and VA21 in other sales organisations(1100 1200 etc.), because it allow the user to create or change orders in all Sales Orgs.

10 |10000 characters needed characters left characters exceeded
Jelena Perfiljeva
Mar 16, 2017 at 08:35 PM

I believe you are correct. We ran into the same issue before: wanted to give access to a combination of SOrg / document type but because these are in two different objects it also allows the unwanted combinations.

Unless you find some other objects using Security trace or an alternative solution in the SAP notes, a custom object may be needed. I don't recall us doing that but maybe we just handled it using Firefighter access. I'll try to dig up more information on this but it'll take a few days.

Edit: by the way, you might want to change the question title. "Intercompany sales" is something completely different in SD and this question is about authorization check, not about sales process.

10 |10000 characters needed characters left characters exceeded
Mark O'Donnell Mar 17, 2017 at 09:05 AM

Thanks for your reply if you find anything please llet me know

10 |10000 characters needed characters left characters exceeded
RUPESH KANCHARLAWAR Mar 19, 2017 at 05:44 AM

You Can Create PFCG role as per Your Requirement,

One Role for V_VBAK_AAT-ZQT,ZQTB and V_VBAK_VKO-1100/10/10

Another Role For V_VBAK_AAT-ZQT,ZQTB and V_VBAK_VKO-1200/10/10

Or In Combination Another Role For V_VBAK_AAT-ZQT,ZQTB and V_VBAK_VKO-1200 and 1300,1400 /10/10

As per Business Requirement you can assign this roles to respective user as you are going one role to all. If we go Respective Role to Respective user then we have this option


10 |10000 characters needed characters left characters exceeded