PA03 Related Access Issue

[gaddam_vinaykumar]

Hello,

Recently I worked on an access issue, where user was getting in PA03;

No change access for payroll area 42.

I searched for the roles containing P_PCR with 02 & 42, and assigned one of the appropriate ones.

Now the business has raised the question,

How the payroll specialist was able to run this activity last month, without any additional role?

I checked the control record log in PA03, the same user had carried out the activity last month.

Additionally I found,

1) no role/profile has been removed from the user.

2) none of the roles assigned to the user has been changed.

3) no check indicator changes.

4) no code changes.

So currently I'm not in a position to answer the business' question.

Can you please help me to sort out this? Have I missed any check, which can give the solution?

Thanks & Regards,

Vinay

[Former Member]

They used a different program which does not make this authority-check?

Best would be to simply ask the specialist.

Cheers,

Julius

[gaddam_vinaykumar]

Hi Julius,

I've checked this already.

The user told, he used PA03 & tried the same activities, which he performs every month.

Thanks & Regards,

Vinay

[Former Member]

Hmmm... try run the changes report for the same period but use report RSUSR100N. Does anything show up there?

Cheers,

Julius

[gaddam_vinaykumar]

Same results.:-(

And sorry, forgot to mention one thing. Every month this run takes place between 15-20. This month it took place before 15.

Thanks & Regards,

Vinay

[Former Member]

Hi Vinay,

There are 4 status available for Payroll under PA03:

1. Released for Payroll

2. Released for Correction

3. Exit Payroll

4. Check Payroll Results

To run Payroll, the particular payroll area needs to be released for Payroll first, which also means all payroll record for employees falling under the payroll area needs to be locked. If this status is not active, no one can run payroll, even if they have access to SAP_ALL 🙂

So, please check with the user when he is trying to run the payroll and what is the payroll status for that area. Payroll status can be only one among the above 4 status at a time. So payroll run can be possible only in 1st status and edit payroll record can be done in 2nd status only.

Hope this helps.

[gaddam_vinaykumar]

Hi Debmalya,

I had confirmed these things.

And for time being if we assume, I got the wrong information from the end users; then the access changes shouldn't have worked. Right?

Thanks & Regards,

Vinay