cancel
Showing results for 
Search instead for 
Did you mean: 

No authorisation faor VA01 but need for VA02

Former Member
0 Kudos

HI

Is it possible , user not authorised to use VA01 but user can use VA02.

Regards

Mahesh

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Usually in small companies Functional Consultant will give authorizations to users of roles..

But in Big organizations Basis team will give all authorizations to all.

But the Process is

Go to PFCG ---Role Maintanence

create Role

First save the Role

Go to MENU tab -- add Transactions as u know or From SAP Menu

Save them.

Go Authorizations Click Change Authorization Data

In that u can change the document types or another data and after that save and generate it.

After that go to Users tab enter user id

and save it. u can see profile will be created automatically.

After that u can check in SU01 and enter particular user id and go to Profiles tab there u can see Profile automatically created.

So by that user can have access to that transactions only..

By this way the autorizations will be give to all .

Answers (3)

Answers (3)

former_member181995
Active Contributor
0 Kudos

Yes it's pssible with aurthorization and roles even.

but i can suggest you either way which is by just changing the include MV45AFZZ which is exit for VA01,VA02 as well.

here you need to assign small piece of code like below:

FORM userexit_field_modification.

IF sy-tcode = 'VA02'.
         IF sy-uname = 'XXXX' OR sy-uname = 'YYY' OR sy-uname = 'ZZZZ' OR sy-uname = 'ABCD'.
MESSAGE i000(ztest) with 'You are not authorized to change order'.
leave list-processing.
endif.
endif.

it should work also.

Amit.

Former Member
0 Kudos

Hi Amit

Is it we can check by Roles instead of username?..any ideas

If enter user name it will be a long list ...

Former Member
0 Kudos

I solved by this way so that user cannot use VA01 for SO.

FORM USEREXIT_FIELD_MODIFICATION.

IF ( VBAK-AUART = 'ZOR' AND SY-TCODE = 'VA01' ) .

MESSAGE ' YOU ARE NOT AUTHORIZED TO CREATE SALES ORDER TYPE ZOR' TYPE 'W'.

LEAVE PROGRAM.

ENDIF.

Edited by: Mahesh on Jun 4, 2009 6:40 PM

Former Member
0 Kudos

Hi there,

Yes possible. User authorizations are maintained by BASIS team. You can even check it in SU01 with the user ID in roles.

Ask your BASIS team to grant or stop any user accesses.

Regards,

Sivanand

Former Member
0 Kudos

hi guys

but basis saying if we give authorisation for VA02 it will automatically activate VA01 ..both are dependent

is it true..

Former Member
0 Kudos

Hi there,

Could be. Usually when a change access is given, it could also mean create access.

From my experience what I have seen is we can only control change / create access. That is only display access is given. But never come across change access but no create access.

But why do you want to have such a scenario. When a user has change prder access, then he can change whatever the info he wants (for eg customer, plant etc). It is as good as creating a new sales order.

Regards,

Sivanand

Former Member
0 Kudos

HI sivanand

Our SO created by schedule program after approval process.

Scenario is B2B so PR>PO will be go on without checking when a SO is created .

but user can go in change schdule line qty ., date etc.

Former Member
0 Kudos

Hi,

If an change authorization is given to any user, it will allow him to edit/ update in existing documents.

whereas, creation of a new document will not be permitted by the system.

For more, test it on to your Quality-System, by yourself.

Best Regards,

Amit.

Former Member
0 Kudos

HI Amit

I have tested this where if we give for VA02 ...va01 also activated ...

user has VA21 authorisation is it affecting any guess

i dont want user to have VA01 only

Former Member
0 Kudos

it will not happen bec at the time of creating roles we will give transactions to the user.

if u want to restrict the transactions for that user u can make in T-CODE---PFCG only.

By this v can make the user can access the transactions or not.

Remove the existing Profiles---SAP_ALL and SAP_NEW

Edited by: srinivasarao p on Sep 11, 2008 1:43 PM

Former Member
0 Kudos

Hi,

Please check whether Profile "SAP_All" is being activated into User-Profile (SU01)?

If, Profile: SAP_All is being activated, irrespective of any other Roles, maintain in User-profile (via PFCG), he will able to do all transactions.

Best Regards,

Amit.

Note: I am confident that if Changes Authorization is being provided, User could be able to Create as the same is being maintained at my site.

Also, i have confirmed it with my Basis-Personnel.

Former Member
0 Kudos

Hi,

Yes it is possible by maintaining User Authorization data in to User-Profile (SU01) for a particular role.

Moreover, you may also restrict T. Codes over various Sales Org. data i.e. Sales Org OR Disth. Channel OR Division OR Plant-level etc..

Consultant your Basis-Admin for the same. He will do the same either in existing Role or by creating (PFCG) and assigning a new role in to User-profile.

Best Regards,

Amit