How to authorization sales office and sales group in VA21 and VA01 t-code

[Former Member]

I need to authorization sales office and sales group in va21,va22,va23 and va01, va02, va03 to control users access the sales order.

I found some articles how to resolve this problem.I have created new authorization object Z_VBAK_ VKO, and add these fields to the object: VKORG: Sales Organization, VTWEG:Distribution Channel, SPART: Division, VKBUR:Sales Office, VKGRP: Sales Group, AUART:Sales Document Type, ACTVT:Activity

I have add the object Z_VBAK_VKO to va01, va02, va03 in SU24 translation.

I test the authorization , but fail, va01 and va02 do not check the authorization.

Why? what can i do? please help me .

thanks

[Former Member · Accepted solution]

Dear Wu

I think you are using the concept of Master Roles and Derived Roles.If ur using then create a master role and derived role for the authorisation group you want. And in the derived role assign the specifics to the respective logins ID. If you want to attach the authorisation to the T-Codes Va01 or VA21 etc then you have to use Exit.

Correct me if i am wrong.

Regards

Jyotsana

[Former Member · Accepted solution]

Dear Jyotsana Kullu ,

I am sorry. I am newer. I do not know about master role or derived role. I only create a role using pfcg and create a single role, add Va01 and Va21 t-code , and create a profile.

Could you tell me what can I do ? thanks

[Former Member · Accepted solution]

Hello,

I know this is an old thread but I thought I'd add this for anyone else who comes across it.

SU24 only helps populate the authorizations in PFCG, it doesn't actually apply the authorization object to the transaction. You still need to change the program to insert the authorization check (the 'use exit' Jyotsana refers to above).

Regards,

Michael

[Former Member]

Dear all,

No person can help me?