Skip to Content
avatar image
Former Member

P_ORGIN and P_ORGXX?

Guru's

What are P_ORGIN and P_ORGXX?

Thanks,

Harish

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

3 Answers

  • avatar image
    Former Member
    Feb 13, 2008 at 09:25 AM

    Hai..

    Its object in Authorisations

    SU03- access Class HR -> Object P-ORIGIN

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 13, 2008 at 10:10 AM

    Hi ,

    These 2 are the authorisation objects ,

    P_ORGIN consisting of fields

    AUTHC Authorization level

    INFTY Infotype

    PERSA Personnel Area

    PERSG Employee Group

    PERSK Employee Subgroup

    SUBTY Subtype

    VDSK1 Organizational Key

    and

    P_ORGXX consisting of fields

    AUTHC Authorization level

    INFTY Infotype

    SACHA Payroll Administrator

    SACHP Administrator for HR Master Data

    SACHZ Administrator for Time Recording

    SBMOD Administrator Group

    SUBTY Subtype

    Once these are provided to the user , he/ she can access the data accordingly .

    Let us take for example there is a role maintained for a user

    THis is how it looks for a user in SU01

    Standard Cross-application Authorization Objects

    Standard Transaction Code Check at Transaction Start

    Standard Transaction Code Check at Transaction Start

    Transaction Code PA51, ZPTR0011

    Changed Human Resources

    Changed HR: Master Data

    Changed HR: Master Data

    Authorization level R

    Infotype 2006, 2007

    Personnel Area HYD, BGL

    Employee Group *

    Employee Subgroup *

    Subtype *

    Organizational Key *

    Inactiv Standard HR: Clusters

    Inactiv Standard HR: Master Data - Personnel Number Check

    Now this employee is capable of looking into data from 2 personal areas HYD and BGL only .

    Also if this being maintained can be used in the custom reports(Z-report) as well for restricting the data according to locations .

    Hope this helps .

    Regards

    SureshP

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      > Can it be said that in order for a user to update/create/delete any HR Master data (payroll - 0008 and 0015), this user will have to be assigned auth.object P_ORGIN? Assuming the other objects is not enabled in SAP....

      >

      > Am just trying to find a way to figure out all users in SAP which have update access to Payroll Master Data. Was thinking I could use SUIM and query based on Auto-Object P_Orgin and Auth.level W.....

      > Would this be sufficient`?

      Hi Joachim,

      Check OOAC (table T77S0 group AUTSW) which objects are activated in the system.

      INCON refers to P_ORGINCON

      NNCON refers to customer-object with context

      NNNNN refers to customer-object without context

      ORGIN refers to P_ORGIN

      ORDXX refers to P_ORGXX

      If custom-objects are activated you should find their names from include MPPAUTZZ (SE38).

      If multiple objects are active user need to have all of them to get specific access. For example if P_ORGIN and P_ORGXX con are active user needs to have W to infotypes 0008 and 0015 in both object to be able to maintain basic pay and payments.

      So after checking activated objects it is only SUIMing the data. AUTHC W and * gives full write access but you might also want to check S, E and D for creating locked records and unlocking records.

      Regards,

      Saku

  • avatar image
    Former Member
    Jan 04, 2012 at 01:38 PM

    I need to create a customer-Specific Authorization Object, but the documentation states that we can use any of the fields in IT0001, and also customer-specific additionald fields. But we need to know if those additional fields can be from a Z infotype.

    If it is not possible, we need to replicate the std P_ORGXX and the way it validates the field pa0001- SACHZ. But with fields from a Z infotype. Is there any way to do it?

    I hope you can help me with this.

    Regards,

    Add comment
    10|10000 characters needed characters exceeded