on 09-11-2008 8:36 AM
HI
Is it possible , user not authorised to use VA01 but user can use VA02.
Regards
Mahesh
Usually in small companies Functional Consultant will give authorizations to users of roles..
But in Big organizations Basis team will give all authorizations to all.
But the Process is
Go to PFCG ---Role Maintanence
create Role
First save the Role
Go to MENU tab -- add Transactions as u know or From SAP Menu
Save them.
Go Authorizations Click Change Authorization Data
In that u can change the document types or another data and after that save and generate it.
After that go to Users tab enter user id
and save it. u can see profile will be created automatically.
After that u can check in SU01 and enter particular user id and go to Profiles tab there u can see Profile automatically created.
So by that user can have access to that transactions only..
By this way the autorizations will be give to all .
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Yes it's pssible with aurthorization and roles even.
but i can suggest you either way which is by just changing the include MV45AFZZ which is exit for VA01,VA02 as well.
here you need to assign small piece of code like below:
FORM userexit_field_modification.
IF sy-tcode = 'VA02'.
IF sy-uname = 'XXXX' OR sy-uname = 'YYY' OR sy-uname = 'ZZZZ' OR sy-uname = 'ABCD'.
MESSAGE i000(ztest) with 'You are not authorized to change order'.
leave list-processing.
endif.
endif.
it should work also.
Amit.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi there,
Yes possible. User authorizations are maintained by BASIS team. You can even check it in SU01 with the user ID in roles.
Ask your BASIS team to grant or stop any user accesses.
Regards,
Sivanand
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi there,
Could be. Usually when a change access is given, it could also mean create access.
From my experience what I have seen is we can only control change / create access. That is only display access is given. But never come across change access but no create access.
But why do you want to have such a scenario. When a user has change prder access, then he can change whatever the info he wants (for eg customer, plant etc). It is as good as creating a new sales order.
Regards,
Sivanand
it will not happen bec at the time of creating roles we will give transactions to the user.
if u want to restrict the transactions for that user u can make in T-CODE---PFCG only.
By this v can make the user can access the transactions or not.
Remove the existing Profiles---SAP_ALL and SAP_NEW
Edited by: srinivasarao p on Sep 11, 2008 1:43 PM
Hi,
Please check whether Profile "SAP_All" is being activated into User-Profile (SU01)?
If, Profile: SAP_All is being activated, irrespective of any other Roles, maintain in User-profile (via PFCG), he will able to do all transactions.
Best Regards,
Amit.
Note: I am confident that if Changes Authorization is being provided, User could be able to Create as the same is being maintained at my site.
Also, i have confirmed it with my Basis-Personnel.
Hi,
Yes it is possible by maintaining User Authorization data in to User-Profile (SU01) for a particular role.
Moreover, you may also restrict T. Codes over various Sales Org. data i.e. Sales Org OR Disth. Channel OR Division OR Plant-level etc..
Consultant your Basis-Admin for the same. He will do the same either in existing Role or by creating (PFCG) and assigning a new role in to User-profile.
Best Regards,
Amit
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
89 | |
8 | |
7 | |
4 | |
4 | |
3 | |
3 | |
3 | |
3 | |
3 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.