Authorization

[Former Member]

Hi,

How to create roles?

How to give authorizations?

Useful replies will be awarded.

Thanks in advance

MMVD

[Former Member · Accepted solution]

Hi MMVD,

Check the tcode SU21 whether the Create is assigned to the Authorization object class or not.

In general different users will be given different authorizations based on their role in the organization.

We create ROLES and assign the Authorization and TCODES for that role, so only that user can have access to those T Codes.

USe SUIM and SU21 T codes for this.

Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.

If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.

This means you have to allocate an authorization object in the definition of the transaction.

Also check this link

<u>http://help.sap.com/saphelp_46c/helpdata/EN/52/6714a9439b11d1896f0000e8322d00/frameset.htm</u>

Award points if it adds information.

Thanks

Mohan

[Former Member]

Hi

A role is a group of privileges that can be granted to database users, user groups, or to other roles.

While privileges always apply, roles must be explicitly activated for each individual database session. Every user to whom roles have been assigned can also define which of the roles should be active in each database session. This definition can be changed after a database session has been opened.

Refer below links

<a href="http://help.sap.com/saphelp_bw21c/helpdata/en/52/6714b6439b11d1896f0000e8322d00/content.htm">Roles</a>

<a href="http://maxdb.sap.com/currentdoc/61/78554056bd1f24e10000000a1550b0/content.htm">Create Role</a>

For Authorization Use <b>SU20</b>

<a href="http://help.sap.com/saphelp_nw04/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm">SAP Authorization</a>

Message was edited by:

SHESAGIRI.G

[Former Member]

Hi,

You can create Roles using PFCG t.code.There you can assign which are the transaction he can use.Once the role is created, goto SU01, create the user and assign the role to the user.

With Regards

Vinu.N