FPCRPO & Security

[KASTENNIS70]

My scenario is as follows, we are using FPCRPO for tracking final invoiced credits.  There are 2 possible customer classes, which is stored in a custom field on table FKKVKP.  There are two separate back office groups which will review the credit clarification items produced in FPCRPO.  Is there a way to allow each back office group, which has a unique security role, to see only their customer class? 

[AmlanBanerjee]

Hi Kelly,

There is a field called authorization group (FKKVKP-BEGRU) in the contract account master table.

Now, you can use these field to segregate the two back office group based on the customer class.

So if you create two Authorization groups say A1 and A2, and assign it to the contract account based on their customer class. Once done, assign the authorization group A1 to all the User role of one of the back office group and A2 to all the User role of the other.

This authoriation group ensures that in order to carry out a specific activity, the user must have authorization for the combination of the activity and the authorization group.

Now when the users having A1 auth group execute the transaction FPCRPO, they will only be be able to view the contarct accounts which have A1 auth group maintained at the CA master level.

Hope it helps...

Thanks,

Amlan 

[KASTENNIS70]

Thank you for the response. 

[william_eastman · Accepted solution]

Kelly:

You could enhance the DFKCRPO structure and use event 4251 to populate the value.  The custom field could then be used in the selection screen.  Maybe then set up a variant where the value in the new field is protected and the users can only access their cases.

regards,

bill.

[KASTENNIS70]

Thank you for the response this will be the direction we take due to client environment.