Skip to Content
avatar image
Former Member

Problems with authorizations

hello i should first say i have no experience at all with authorizations, as until now i have had user access department doing all this

I am trying to create a role for financial department- in the simpliest way

i create in PFCG composite role called Z_SAP_FI_ALL and then i add to it all SAP_FI_*

i saved it

i create user in Su01 and assign to him the custom role,

when i log in i can not execute transactions like FB60 so on

Any idea how to solve this one?

when i click on comapre users i get message that SAP_FI... doesn't contain profile or authorzations for all roles

Edited by: Yavor Markov on Feb 2, 2009 11:15 AM

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • Best Answer
    avatar image
    Former Member
    Feb 02, 2009 at 10:33 AM

    when you get the authorization error, go to transaction SU53 and it will give you the details of the missing authorization object and the required value.

    Then check in the role what the value of the object has and adjust accordingly.

    Regards,

    Jazz

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Anyway i saved without entering values for organizational elements and now when i click on display authorizations it is all red and yellow. IS this big problem?

      P.S now FB60 works, but i am worried about those red and yellow stuff

      You have left the organizational Levels unasigned. thats the reason why its showing Red. If you dont want to restrict the organizational levels, leave it as "*" . Otherwise, you will get error some point or the other during the transaction.

      About the yellow trafic light, its becuase Authorization fields not completely maintained. Ideally, you should make everyting green for the transaction to work fine. To make things easy, You can select the parent node in the role in the authorization edit tab and click on the yellow traffic light and assign full authorization.

      Read the following document if you are not sure about these. It will help you.

      http://help.sap.com/saphelp_banking463/helpdata/en/12/cb33688c4c11d396cb0000e82de14a/frameset.htm

      Regards,

      Jazz