Skip to Content

Protect certain fields on customer master xd02,vd02,fd02 for a specific role.

I am trying to lock down all but a few fields from being changed on the customer master for certain users. I would be expecting to tie this to one profile. I see that I have allow access to certain areas globally for the transactions or customer master data. I can lock down by company code.


I did find F_KNA1_AEN which seems to be what i'm lookign for. But so far the amount of documentation on it doesn't explain it well enough for me to utilize it correctly. So far I have been able to create a field group and assign a few fields to it. then change the authorization on this for that profile. But what I have working is that if the field is in a field group other than the one authorized for the user's profile it would be protected for that user. If the field is not in a group it is not protected.


To me this means I would have to enter all fields available with transaction xd02 into a field group not assigned to the user. I do not see how to easily and quickly do this. Also I don't think that this is really what is inteded when I read how to use the F_KNA1_AEN object.


Does anyone have advice on what other configuration or security I might have to change to limit a specific profile so they have access to the customer master areas through the transaction xd02 but by they would be protected unless in the field group assigned on F_KNA1_AEN. my assumption is that other users (roles) would not be affected by this change.

Any advice is appreciated.

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

1 Answer

  • Posted on Dec 04, 2012 at 11:02 PM

    "To me this means I would have to enter all fields available with transaction xd02 into a field group not assigned to the user. I do not see how to easily and quickly do this. Also I don't think that this is really what is inteded when I read how to use the F_KNA1_AEN object."

    Give it a try, it is exactly what you need to do. It shouldn't be too dificult to find all the fields you will need to protect.

    Configuration needs to be done in this area: SPRO->Financial Accounting -> Accounts Receivable and
    Accounts Payable-> Vendor Accounts -> Master Data -> Prepare Changes
    to VendorMaster Data -> (Define Field Groups for Vendor Master Data) and (Group Fields for Vendor Master Records)

    Add a comment
    10|10000 characters needed characters exceeded

    • Thanks for the reply

      I did give it a try and it's not that difficult but a little time consuming to go through each field on the screen and add it to a field group. It works fine for limiting the specific users access. I was just doubtful this was the best way.

      Maybe there was a faster way to assign groups or something else I was missing. Or maybe someone that has advice on some logical way to group the fields for future use.

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.