Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Authorization role

Former Member
0 Kudos

Hi,

Iam new to security , we are working on ECC6.0 environment.I was asked to create role which has BP transcation.

If i assign only BP tcode in PFCG , then when i enter tcode BP some screens it throws " you do not have authorization" .Is there a standard profile or authorization object or role I can use it?

- Lisa

1 ACCEPTED SOLUTION

Former Member
0 Kudos

If you are unable to add tcode to a role then you do not have authorization for it.

Make sure you authorization for pfcg for S_USER_* objects.

You can find the role names with BP transations from SUIM tcode.

SUIM->By transaction assignment.

Rakesh.

7 REPLIES 7

Former Member
0 Kudos

If you are adding BP transaction directly on the profile, try adding on the menu and then generate the profile with suggested objects.

Regards,

CB

Former Member
0 Kudos

If you are unable to add tcode to a role then you do not have authorization for it.

Make sure you authorization for pfcg for S_USER_* objects.

You can find the role names with BP transations from SUIM tcode.

SUIM->By transaction assignment.

Rakesh.

Former Member
0 Kudos

Lisa,

Welcome to security.....

When you add a transaction code, you need go to authorization and click on the pencil button and fill the relevant authorization objects.

Depending on the requirement you need to fill the values for authorization objects.

When you get an authorization error and if you are that you need to perform that operation then immediately take SU53 when you get the error and updated the role with those missing values for the authorization objects.

I hope this will help you and let us know if you still have issues.

Thanks,

saga

Former Member
0 Kudos

I Just wanted to make you clear , I know how to add the tcode in role.I wanted to know is there a standard procedure to create Bussiness partner (BP) authorization.I know BP is different than other tcodes.

Is there a standard Authorization group/profile/object can we use for BP authorization?

- Lisa

0 Kudos

Hi Lisa,

Plz chk out the document in the below link related to setting up of authorization for BP.

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/0062e975-48c2-2910-e49c-8d6ad796...

Thanks,

Saby..

Former Member
0 Kudos

Saby,

the link talks about Internet sales user access CRM and does't help me any more.

Iam looking for basis authorization for BP activities and accesss

- Lisa

0 Kudos

Hi Lisa,

You can check sap_bc_basis_admin to know about basis authorisations.

And regarding the role giving BP access, you can use SU53 approach as mentioned by Sagarika, or ST01 approach( if you find SU53 approach time consuming ).

Regards,

Sachhidanand Rankhambe