How to Restrict Intercompany Access By Company Code

[Former Member]

We have multiple territories, of which each is assigned their own company code We'd like intercompany access to be restricted by company code so users only have intercompany access to only territories they have authorization for. Currently, we have role X setup and authorized users have access to this role.

Intercompany TCODES would include FBU2, FBU3, and FBU4.

The obvious solution would be to create additional roles via PFCG whereby each role has access to X company codes and assign these users to the appropriate role. Any other ideas? Also, with the ECC upgrade, doesn't this impact performance on the cube when trying to restrict roles by company code?

Thanks in advance!

Edited by: david kim on Feb 10, 2009 2:13 AM

[former_member662602 · Accepted solution]

Hi david kim,

Based on my experience, the best way is by maintaining the roles in Txn PFCG as what u did just now. FYI, there's no impact on performance on the cube when trying to restrict roles by company code. (we have faced it before when upgrading 4.6C to ECC6...with flying colors ...).

Hope this will solve your problem.

TQ

Regards,

Nazrul

[Former Member · Accepted solution]

Naz,

You're the man! Since you stated that it should not impact performance, we've received pushed back on a different query that involved user restriction by location code and because of the code of the ECC, beyond restriction of 4 objects in location code will cause a performance impact. For example, 4 objects would create 4 x 3 x 2 x 1 = 24. Can you confirm this and if so, would you by chance have referenced documentation for this explanation?