Authorization Control of PS Reports

[sukhveer_singh2]

Dear All,

We are tyring to do reporting restriction between two departments in standard PS cost and revenue reports.

The diffrence between two departments are

1>Coding Mask

2>Profilt centers

3>cost centers

How we can restrict to view cost and revenue reports between two departments.

Expert advice needed urgently....

Thanks & Regards,

Sukhveer

[former_member183424 · Accepted solution]

Go to SU24, enter the transaction code, then press execute.

You will get all authorization object list. Then you can restrict the value as per these authorization objects.

[former_member195427]

Please mark your thread as 'Closed' if your query is resolved.

Thanks

[sukhveer_singh2]

Dear Saurabh,

Thanks for your support, our basis team is working in that solution our PS team suggested.

Due to other basis activities in servers they are not able to work in this issue.

They will work and I will update the ticket.

Thanks for helping and supporting me. Sorry for delay in update.

Thanks & regards,

Sukhveer.

[Former Member]

What reports are you unable to control using authorizations

[sukhveer_singh2]

Dear Anand/Saurabh,

Sorry for delay in response. Even we have given autohrization control with roles and profit centers are in that group as per department.

They are not able to work on each other project as per profit center authorization as per object C_PROJ_PRC, it is working fine in transaction.

But when we are coming to report such as S_alr_87013533 this authorization is not working.

Enen with the profit center group authorization they are able to view each others project cost.

Sorry for delay in response.

We need to give some more input to Basis person.

Thanks & regards,

Sukhveer.

[sammar81]

Hi Sukhveer,

Please run a trace on S_ALR reports and see which auth objects are getting hit... OR use Su24 and use your judgment on auth objects for reports and follow the same step you have followed for C_PROJ_PRC. It should work..

Sammar

[MTerence]

Hi Sukhveer,

In checking the authorization object for the transaction S_ALR_87013533 in SU22, below are the available objects. I guess the same C_PROJ_PRC should be available.

C_AFKO_DIS	Network: MRP Group (Plant) and Transaction Type
C_AFVG_APL	PS: Work Center for Network Activities and Activity Elements
C_AFVG_TYP	PS: Activity types for network act. and activity elements
C_PROJ_KOK	PS: Controlling Area for Project Definition
C_PROJ_PRC	PS: Profit center for project definition
C_PROJ_VNR	PS: Project Manager for Project Definition
C_PRPS_ART	PS: Project type authorization for WBS elements
C_PRPS_KOK	PS: Controlling Area Authorization for WBS elements
C_PRPS_KST	PS: Cost Center Authorization for WBS elements
C_PRPS_PRC	PS: Profit Center Authorization for WBS elements
C_PRPS_VNR	PS: Project Manager Authorization for WBS elements

If this is not getting solved.

Assign this transaction and the profit center in a test user ID, Take a trace by opening the respective project which should not give access. The trace will be helpful to identify how it is giving the access.

Let us know if you still have issues.

Regards

Terence

[sanjeevc]

Hello,

SU24 is the best transaction for checking authorization object consult with basis guy in your organization they will let you know more about it.

Regards,

Sanjeev

[sammar81]

Hi Sukhveer,

As mentioned by Saurabh, You can restrict the authorization based on Profit Center or Cost Center.

I guess your security team would have created the roles just add the object type PRCTR and give the Profit center for the particular department to that user role. You would need two roles for each department created from the standard role which is K_REP_ALL this is master role for all the reports in SAP PS.

Your security/basis person would be able to help you in creating these roles just get them assigned to their users IDs. You can test it out using a Test user and assigning these roles.

Hope it clears your doubts.

Cheers

Sammar

[former_member195427]

Hi Sukhveer,

You can restrict based on either cost center (authorization object C_PRPS_KST  ) or profit center ( C_PROJ_PRC). You can discuss with Basis/Security consultant on it.

Which report you are actually controlling for authorization? Is it any custom report?

Regards

Saurabh

[sukhveer_singh2]

Dear Saurabh,

All standard cost and revenue reports like S_alr_87013533

We checked there are not authorization objects for these reports.

This will not work fo reports..

Thanks & Regards,

Sukhveer.

[former_member195427]

Dear Sukhveer,

It should work. If you go with SU24 (as Dev suggested here) ,you will find out those authorization objects which I suggested

earlier,you need to discuss with Basis guy to authorize control on its values.

Regards

Saurabh

[sukhveer_singh2]

Dear Saurabh/Dev,

We have tried with these authorization object. But it is working fine with project related transactions. Means one department not albe to change project of other department. It is working fine with Cj20N/Cj02.

But when it comes to reports one department is able to see other department cost and revenues.

If anyone done this restictions in S_alr_87013533 or in other reports.

If we are missing something. Need more guidence on that issue.

Thanks &  Regards,

Sukhveer.

[former_member195427]

Hi Sukhveer,

You need to check with Basis guy on it. It should work.

I cant access my system right now, maybe tomorrow i will check it in my system.

Regards

Saurabh