Skip to Content
avatar image
Former Member

Authorization role

Hi,

Iam new to security , we are working on ECC6.0 environment.I was asked to create role which has BP transcation.

If i assign only BP tcode in PFCG , then when i enter tcode BP some screens it throws " you do not have authorization" .Is there a standard profile or authorization object or role I can use it?

- Lisa

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

5 Answers

  • Best Answer
    avatar image
    Former Member
    Oct 22, 2008 at 06:38 PM

    If you are unable to add tcode to a role then you do not have authorization for it.

    Make sure you authorization for pfcg for S_USER_* objects.

    You can find the role names with BP transations from SUIM tcode.

    SUIM->By transaction assignment.

    Rakesh.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Oct 22, 2008 at 06:24 PM

    If you are adding BP transaction directly on the profile, try adding on the menu and then generate the profile with suggested objects.

    Regards,

    CB

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Oct 22, 2008 at 07:09 PM

    Lisa,

    Welcome to security.....

    When you add a transaction code, you need go to authorization and click on the pencil button and fill the relevant authorization objects.

    Depending on the requirement you need to fill the values for authorization objects.

    When you get an authorization error and if you are that you need to perform that operation then immediately take SU53 when you get the error and updated the role with those missing values for the authorization objects.

    I hope this will help you and let us know if you still have issues.

    Thanks,

    saga

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Oct 22, 2008 at 07:16 PM

    I Just wanted to make you clear , I know how to add the tcode in role.I wanted to know is there a standard procedure to create Bussiness partner (BP) authorization.I know BP is different than other tcodes.

    Is there a standard Authorization group/profile/object can we use for BP authorization?

    - Lisa

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Oct 22, 2008 at 08:38 PM

    Saby,

    the link talks about Internet sales user access CRM and does't help me any more.

    Iam looking for basis authorization for BP activities and accesss

    - Lisa

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Lisa,

      You can check sap_bc_basis_admin to know about basis authorisations.

      And regarding the role giving BP access, you can use SU53 approach as mentioned by Sagarika, or ST01 approach( if you find SU53 approach time consuming ).

      Regards,

      Sachhidanand Rankhambe