Custom Authorization Objects

[manish_singh13]

Hi,

Can anyone guide me step by step how to create custom authorization objects?

Thanks

Manish

[former_member74904]

http://help.sap.com/saphelp_47x200/helpdata/en/9e/74ba3bd14a6a6ae10000000a114084/frameset.htm

[Former Member]

Hi manish,

1) Hit SU24

2) Type in a transaction code for which authorization checks need to be adjusted

3) The system shows the transaction you selected, to change authorization checks select "Change Indicator"

4) Find for the auth object which you want to change

5) Click on change button next to the auth object.

6) Make the changes

7) Save the chenges.

Hope it helps.

Please award points if it is useful.

Thanks & Regards,

santosh

[manish_singh13]

Thanks Dimitri.

This document pointing towards creating object related to HR.

I need to create object related to FI. So kindly explain if the steps are same as in step 4 of this doc it is mentioned to run report RPUACG00. I think this report doesn't have any link with FI.

So will be grateful if any doc or link related to FI object can be provided.

I am not a security person...just trying to help out my collegue. Please bear with me.

Regards

Manish

[Former Member]

A few inputs from me related to auth groups as well, as new auth objects and new auth groups go hand in hand at times...

1) To create table auth groups: SE54-->Select 'Authorization

Groups'>Create/Change>New Entries.

2) To assign an auth group to a table: SE54-->Select 'Assign

Authorization Groups'>Create/Change>Select 'Table Name' check

box-->Enter Table Name. You can also maintain TDDAT instead.

3) To assign the auth group to a role: Go into PFCG edit mode, enter

authorization object S_TABU_DIS with the auth group created in step 1.

Br,

Sri

Award points for helpful answers

Message was edited by:

Sri Raghu Kishore Pusapati

[Former Member]

Hi,

Custom authorization objects are not created using SU24 or SE54 as suggested by some of the previous responses.

To create an authorization object:

1) Execute transaction SU21

2) Double-click an Object Class to select a class that should contain

your new auth object

3) Click on CREATE (F5)

4) (If creating custom field) - Click the 'Field Maintenance' button -->

Click on CREATE (Shift+F1)

5) Enter the Name for the New Authorization field and the corresponding

Data Element and SAVE

6) Confirm the Change Request data for the new Authorization Field

7) Go back two screens (F3-->F3)

😎 Enter the Authorization field name and document the object:

9) SAVE and ACTIVATE the documentation

10) Save the new Authorization Object

11) Confirm the change request data for the Authorization Object and

EXIT SU21

12) Finally, the SAP_ALL profile must be re-generated

Luis.