Authorization Group.

[Former Member]

Hello Experts,

Authorization group is freely definable which we can put anywhere in like master data etc. My concern is how to assign users to the authorization group in order to make this concept fruitful.

Please help in this regard...

Thank You very much

SAP Aspirant.

[Former Member]

You assign it through the related authorisation objects for that particular authorisation group. It is the same as the rest of the authorisation concept (except that check will be placed on those objects only if an auth group is maintained against the data record)

Have a look through auth objects containing field BEGRU for soem examples.

[Former Member]

how to assign users to the authorization group

To assign the authorization group to any user , you can use the authorization object S_TABU_DIS , where you can restrict the authorization through the activity, for this you should first assign the particular authorization group to any table for which user needs authorization.

[Former Member]

how to assign users to the authorization group

To assign the authorization group to any user , you can use the authorization object S_TABU_DIS , where you can restrict the authorization through the activity, for this you should first assign the particular authorization group to any table for which user needs authorization

[Former Member]

Hi,

S_TABU_DIS Is only one of the several objects which uses the field BEGRU. Some of the other objects where the field BEGRU is used are M_MATE_MAR, M_MATE_MAT, F_FBCJ.

You can get the entire list of objects from SUIM reports.

Regards,

[Former Member]

Hi,

If you created a new Authorization group and you have assignedmaster data etc to it , you can provide access to the users via their assigned roles by updating the an existing authorization object (Ex: s_tabu_dis) and adding that new authorization group. Then this will give the users who are assigned that role access to the master data that are assigned to that new authorization group.

Good Luck

Rasheed

[Former Member]

Authorization Groups ensure that the certain authorizations are available only to a particular group of users.

For instance, You have defined an authorization object. This object can give access to the user to create/change or display using Activitie Codes. And the autgorization groups can further impose restrictions authorizations.

When the users are given access to this auth object, they will be have restricted access to this authorization group for the define activity code.