Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Authorisation check on profir center group

former_member556881
Participant
0 Kudos

Dear Experts,

We have a requirement to restrict the users's access to a particular profit center group.I have set the value in the tab "profit center group" for object K_PCA.The profit center org level is set to * .With these settings users are able to access other profit centers also.Do I have to remove or maintain a specific value for profit center to meet my requirement.

Please suggest any solutions

Edited by: mutnuru dinakar on Jun 24, 2011 1:48 PM

2 REPLIES 2

krysta_osborn
Active Participant
0 Kudos

Have you done an authorization trace on one of the users with too much access? That should show you which auth objects are getting checked so you can figure out what changes are required.

Regards,

Krysta

0 Kudos

Hi,

Sorry for my late reply.Yes,I have done authorisation trace.It is only tracing object for company code F_BKPF_BUK.It is not showing the objects for either profit center or profit center group.I have found the below information from help.sap.com link.

http://help.sap.com/saphelp_46c/helpdata/en/38/ac94de8d49d111a4620060b03c3b0e/content.htm

If a transaction checks and does not find the authorization for the given profit center, it checks for authorization for the profit center group in the standard hierarchy that contains that profit center. If this authorization is also missing, the system checks on the next level up in the hierarchy. This search ends with the highest node in the standard hierarchy.

Doe it mean can't we control the access on profit center group as the highest node will cover all the profit centers.

Please suggest any solutions.

Regards,