disable some fields in the user transaction role

[Former Member]

hi guru's,

i want to disable some fields in user transaction role

for example in va01- sales order document, end user can enter/change some fields but he should not change some fields.

please give your valuable suggestions

regards

Ramesh

[Former Member]

Hello Ramesh,

First i want you to identify the fields where you dont want the users to able to enter value. Please note that as security administrators we might not be able to grey out the fields(thats done by the functional ABAP guys). But we can remove the authorizations for the users.

To identify the objects that are being used for VA01:

Goto transaction SU24. type in the value VA01 in the <b>transaction code</b> field. and execute.

In the next screen click on (display)CHECK indicator button.

The following screen show you various objects with statuses.

Identify the objects which have "<b>CHECK/MAINTAIN</b>" status. These are the objects which are available in the role containing transaction VA01.

Lets say for example. the objects:

V_VBAK_AAT- sales documents - authorization for sales doc types

V_VBAL_VKO- sales documents- authorization for sales area

are check maintain.

Go into the role (through PFCG) and goto athorizations tab and check these authorizations.

Normally they would have 01-create, 02-change and 03 display based on requirement.

Take these values off depending on what authorizations you want the users to have or not.

Regards,

Prashant

[Former Member]

But also be careful on what authorizations you remove. Based on customizing done by your functional guys, the business users might need to have certain authorizations in order to be able to create a sales order

And the SD /OTC side of the business is always very critical. and it goes without saying that VA01 has ***** (5 stars) went it comes to being a critical transaction.

Regards,

Prashant