Authorization at object level

[Former Member]

Dear experts,

We are using CRM 5.0 (WebIC and PCUI). We have 3 services orders (business transactions) that we use as templates . We want only users with admin role to be able to display and change them. Currently, everyone has access to them.

How could we do that?

Thanks in advance

Stephanie

[Former Member]

Just restrict the authorizations (for those transactions) from the general role/profile which everyone has.

[Former Member]

Hi,

What is the authorization object to restrict at object level?

Thanks

Stephanie

[Former Member]

Hi Stephanie,

Check authorization objects in SU24-> your t-code -> execute.

Click on check indicator->Field values.

You will get authorization object for given t-code.

Regards,

Payal Patel

[Former Member]

The best way to determine this would be to run a trace with ST01. It really depends upon if you have created any custom CIC profiles as well. SU24 may not provide complete information when attempting to determine which auth objects are involved here.

Some of the auth objects involved may be

CRM_ORD_LP

CRM_ORD_PR