AR Customer Maintenance Authorization Control

[Former Member]

Hi All,

I'm using SAP ECC6 and Oracle 10.2.0.4.0.

I wanted to control the authorization for Accounts Receivables (AR) Customer Maintenance.

Currently, there are some tcodes under this role, such as:

1) XD01 - Create Customer (Centrally)

2) FD01 - Create Customer (Accounting)

How can it be control from authorization point of view if I want to allow my user to have DISPLAY authorization only whenever they execute the above tcodes.

For example:

If user execute tcode: XD01 and key in the account group: End Customer, they will not be able to enter any information and save it.

I understand that this tcode is fall under maintenance authorization group, but can it be controlled?

Please kindly advice how can this be done.

Appreciate for any of your help and advice.

Thank you.

Peter

[Former Member]

Hi Suresh,

Thank you for your kind response.

I've checked OB31 and found no entries. I've used tcode: SU21 and SU22 to chec the affected tcode: FD01 .

I've also checked and analyzed authorization object F_KNA1_AEN and have configured a dummry role for testing in QAS.

Authorization package in the dummy role:

-> Maintained Customer: Change Authorization for Certain Fields F_KNA1_AEN

-> Maintained Customer: Change Authorization for Certain Fields T-QS25298300

-> Field group VGRUP

For Field group (VGRUP), I'm able to define the "Object Type": D for Customers, but I do not know what is the value for "Field Group"

Please kindly advice how can this be done.

Thank you.

Cheers.

[Former Member]

Hi All,

Anybody can or advice on this issue?

Thank you.

Cheers.

[Former Member]

Hello,

First check In OB31 settings if you select the indicator 'No Authorization' for a field group, then it does not flow into the authorization check when maintaining the master data. This group is then only used for selecting fields for the change document display programs.

In your case since you want authorization checks to be performed you should not select 'No Authorization' check box in OB31.

Next authorization object F_KNA1_AEN is responsible to restrict customer changes (Change Authorization for Certain Fields). Please go to SU22, and select respective transaction code. then system will provide the list of the authorization object list. Here, you may get documentation for each of the authorization objects at SU21.

I hope this is useful.

Thank you.

Best regards,

Suresh Jayanthi.