Restrict users based on Customers

[Former Member]

Hi ,

In ECC system, we have general requirements to restrict users based on customer account group where customer account group is represented as Site/Store.

Possible values for Customer Account group -

- Reference Store

- Head Store

- Wholly Owner Store etc.

Till this point everything is fine. However, Client has few additional External Stores which are represented as one Dummy Site and Customers belonging to that store are actual external Stores.

Example, we have additional Value for Customer Account Group -

- Dummy Site

And now all the Customers part of dummy site is actual stores and we are needed to drill down our restriction to this Customer (So called Stores).

To restrict used based on customer account group/Stores, we can utilize F_KNA1_GRP with filed KTOKD (Customer Account Group). However, is it possible to create roles based on individual customers of these Stores?

If yes, how can we do that?

P.S. I had a look at authorization object F_KNA1_BED with filed BRGRU. Can this object help us in fulfilling our requirement? Or there is any other SAP provided authorization object which can help us to restrict on Customer values?

Thanks,

Sheenam

[Former Member]

You could use F_KNA1_BED, I guess - but that would mean excessive maintenance of both: BEGRU and customers, if I understood your scenario correctly and you really, really want to break that down to single customers.

It would be even more excessive to utilize F_KNA1_GRP. Can be done, though.

Both solutions are completely un-elegant and I am not happy proposing them. But I am curious as a cat: what exactly is the business process expecting you to restrict access to customer data down to a single customer?

Edited by: Mylène Dorias on Mar 24, 2010 8:39 AM