Regarding BOM & Production order restriction.

[Former Member]

Hi PP Gurus,

We have a requirement wherein a user/user group should not able to change of view BOMs of some specific materials but the user should be able to see/change the BOMs for other materials.

Same requirement is for a Production order type. This production orders of this particular order type should not be created/changed/displayed to anybody other than specific users.

I have a concern about various production reports, MD04, CO24 etc. which will show production order and their quantity.

Please help.

Thanks,

Abu Arbab

[Former Member · Accepted solution]

You can control using different roles in SAP security. You Security team shd be able to help you in this.

Say if you wanna control users for specific order types: u can use auth object C_AFKO_AWA and C_AFKO_AWK..

Regadrs

[Former Member · Accepted solution]

Hi,

Thanks for the help and input. There is soemthing done using GRC but the problem is no more.

Regards,

Abu Arbab

[Former Member · Accepted solution]

Hey Abu,

Would you be able to share more about your resolution and GRC?  I recently came across a similar requirement where a specific business unit within our company wanted to lock down access for a list of materials/authorization group.  To provide a high-level summary, the business considers specific material Bill of Materials as propritary and would like to restrict access to view the BOM, components, and quantities.  This is something new for our company who have always took the approach that our manufacturing and engineering teams should have visibility of BOM data throughout the system and the only restrictions applied were for update/change.  At this point, implementing BOM authorization groups would be reasonable but updating all of our custom reports, interfaces, and verifying impact on standard SAP transaction would be a monstrous task.

Thanks!

[Former Member]

Hi,

Quite an interesting need, can you let us know the need for this?

A suggestion:

I think most of these transactions check for material number, if not, you can ask your basis person to add a check for material number in the t-codes for which you need.

Now for users who need to access these sensitive materials you can assign access, for the rest you can exclude these materials. If these materials are many, maybe you can create a Z table containing these materials & check on this table.

However do a thorough check before proceeding as user can branch into different transactions, so a thorough check is required.

Regards,

Vivek