Restricting Changing of the Purchasing Group

Hi,

The relationship of a Transaction ans it'd corresponding Authorization Objects is available in TCode SU24. So if you go there and put the Tcode MEMASSRQ and then execute then you will get the list of Objects available for this Tcode and their check proposals or more popularly known as Check Indicator.

Now from study of the available fields it is evident that the Object containing Purchasing Group as a Field (an Organization Level in nature) and also proposed to be maintained in Profile Generator (Check and Maintenance proposal = Yes) is M_BANF_EKG.

When you are adding the tcode in Role menu you will get this object for maintenance in Authorization data.

Regards,

Dipanjan

Hi Again,

Before you perform these options I think you should read the following SAP documentation to get an idea of Role, Profile, Authorization objects etc. Please use the below link.

[SAP Authorization Concept|http://help.sap.com/erp2005_ehp_04/helpdata/EN/3e/cdad0dedc411d3a6510000e835363f/frameset.htm]

Regards,

Dipanjan

Hi Salameh

Are you a basis or security/auths person? If basis then I (think) you are drifting into security either due to your client giving you incorrect work or the request has come to the wrong person (or...your client has only hired one person or more to do both basis and security).

4 months in SAP to know what the auth objects/tcodes/SoD issues are isn't enough to safely manage a security concept - is there anybody else in your department who you can go to to ask these sort of questions instead of posting on a forum? IMO I'd recommend sticking to basis if that is your speciality and you'll not be short of work, running role transports to prod without really understanding what/why is going to be painful for all concerned.

Best wishes

David

Sorry, these forums are not a substitute for basic training.

This is your responsibility, or better said your customer's...

Thread locked.