Sales Area - Division - Restriction

[Former Member]

Hi Guru's

I know security is generally handled by Basis. However, I am getting the feedback, that we can't restrict derived roles at the billing document - by Sales - Division.

It is possible to restrict by Sales Document and Division (V_VBAK_VKO), but why not billing document?

Please help!

[jiteshmehta · Accepted solution]

Hi

V_VBRK_VKO Billing: Authorization for Sales Organizations

is available.

i suggest you speak to Basis team,

First go to transaction SU24

enter tcode and exeute

Select tcode and click on Check indicator

you will get all authorization object for the tcode.

I have checked for VF01 and have got V_BRK_VKO.

which is for sales org.

and V_KONH_VKO ACTVT is for sales org , dist channel and div.

SPART $SPART

VKORG $VKORG

VTWEG $VTWEG

Regards

Jitesh

[Former Member]

For the billing transactions the following are the standard

authorisations provided by SAP:

V_VBRK_VKO sales organisation

V_VBRK_FKA billing type

This is done in LV60AA08.

Main program SAPLV60A

Source code of LV60AA08

...

• Berechtigung auf Verkaufsorganisation

AUTHORITY-CHECK OBJECT 'V_VBRK_VKO'

ID 'VKORG' FIELD US_VKORG

ID 'ACTVT' FIELD US_ACTVT.

...

AUTHORITY-CHECK OBJECT 'V_VBRK_FKA'

ID 'FKART' FIELD US_FKART

ID 'ACTVT' FIELD US_ACTVT.

...

I'm sorry to tell you that there is no authority check in the billing

area for division(spart), but only a check for billing type and sales

organisation.

If you do not see the possibility that these objects are enough to buildup

your process, you should think about a modification.

Thanks for your co-operation.

Warm Regards,

Raghavendra YN

SAP Active Global Support

[Former Member]

Thanks for answering...However the Basis guy, says this solution is still not able to restrict the users.....are there any OSS notes out on this topic?

[jiteshmehta]

Hi

Why is basis saying so? have the maintained the Authorization object, go to program SAPMV60A, find the Authority-Check you will get the authorization objects available.

V_VBRK_VKO is there with Sales Org, have they maintained it?

If you want restrict both on Sales org and division find a user exit and define new authorization object and put authority-check in the code.

Regards

Jitesh