Skip to Content
author's profile photo Former Member
Former Member

AR Customer Maintenance Authorization Control

Hi All,

I'm using SAP ECC6 and Oracle 10.2.0.4.0.

I wanted to control the authorization for Accounts Receivables (AR) Customer Maintenance.

Currently, there are some tcodes under this role, such as:

1) XD01 - Create Customer (Centrally)

2) FD01 - Create Customer (Accounting)

How can it be control from authorization point of view if I want to allow my user to have DISPLAY authorization only whenever they execute the above tcodes.

For example:

If user execute tcode: XD01 and key in the account group: End Customer, they will not be able to enter any information and save it.

I understand that this tcode is fall under maintenance authorization group, but can it be controlled?

Please kindly advice how can this be done.

Appreciate for any of your help and advice.

Thank you.

Peter

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • author's profile photo Former Member
    Former Member
    Posted on Oct 11, 2010 at 11:59 AM

    Hello,

    First check In OB31 settings if you select the indicator 'No Authorization' for a field group, then it does not flow into the authorization check when maintaining the master data. This group is then only used for selecting fields for the change document display programs.

    In your case since you want authorization checks to be performed you should not select 'No Authorization' check box in OB31.

    Next authorization object F_KNA1_AEN is responsible to restrict customer changes (Change Authorization for Certain Fields). Please go to SU22, and select respective transaction code. then system will provide the list of the authorization object list. Here, you may get documentation for each of the authorization objects at SU21.

    I hope this is useful.

    Thank you.

    Best regards,

    Suresh Jayanthi.

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Oct 12, 2010 at 09:17 AM

    Hi Suresh,

    Thank you for your kind response.

    I've checked OB31 and found no entries. I've used tcode: SU21 and SU22 to chec the affected tcode: FD01 .

    I've also checked and analyzed authorization object F_KNA1_AEN and have configured a dummry role for testing in QAS.

    Authorization package in the dummy role:

    -> Maintained Customer: Change Authorization for Certain Fields F_KNA1_AEN

    -> Maintained Customer: Change Authorization for Certain Fields T-QS25298300

    -> Field group VGRUP

    For Field group (VGRUP), I'm able to define the "Object Type": D for Customers, but I do not know what is the value for "Field Group"

    Please kindly advice how can this be done.

    Thank you.

    Cheers.

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.