Restricting the ATP user for GATP - corrrect roles/authorizations

[Former Member]

Hi:

If the dialog user that is used for the ATP check (from ECC to GATP) has more authorizations than needed and this is going to be a problem in production. The user can run SCM transactions from the results screen of ECC and this is not desirable.

Therefore, the ATP user should be a restricted user that has only authorizations for this specific task. If you know what are the exact roles/authorizations to give to the ATP user, could you share them?

Thanks in advance.

Satish

[Former Member · Accepted solution]

For R/3 please check OSS Note 447543 - APO: Authorizations too comprehensive/not user-specific.

"If it is necessary to have different authorization profiles in APO for different R/3 users when calling in APO, the following solution applies:

Activate the setting in SM59 that is used for the RFC connection CURRENT USER.

In the APO system, create the respective users and assign authorization profiles. This is necessary in order to achieve the necessary flexibility concerning authorizations in the APO system."

For APO :

AuthorizationsObject C_APO_ATP in APO .

please chose activity as per user role.

01 Create or generate

02 Change

03 Display

04 Print, edit message

06 Delete

16 Execute

39 Check

Manish

Edited by: Manish Kumar Rathi on Oct 21, 2008 1:24 PM