cancel
Showing results for 
Search instead for 
Did you mean: 

Authorization objects

Former Member
0 Kudos

Hi,

from where set authorization objects for a user?

Best regards

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi,

When an transation is added into a role then the authorization objects corresponding to that transaction are pulled directly into the PFCG authorization tab if they are check/maintained in SU24, these objects are present in USOBT (sap standard table)and USOBT_C(customer defined table).

Authorization objects can also be added manually into pfcg->authorization tab.

Rakesh

Former Member
0 Kudos

Hi,

To set the authorization objects to users follow the below steps.

1.After getting the authorization error take the /nsu53 screen shot and expand the all fields and note down the auth.object and maintained values for that object.

2.In the same screen it will display the roles which are executable for that auth.object then go to that role pfcg>change>authorization tab>ctrl+f>enter the authorization value--> it will display the authorization object then compare with the su53 screen shot values and find the diff. and add that values.

Regards,

Reddy V.

Former Member
0 Kudos

Hi Reddy,

I conveyed the same !!!

Authorization objects are maintained in SU24 and which reflect USOBT_C table and standard objects are present in SU25 which reflect USOBT table.

Further Su53 is not the solution for all authorization failures, SU53 will not give you some of the authorization failures like MRP value is missing or setting a delete flag at client level etc.

You have to trace the activities of the user and then decide what is missing.

Rakesh

Answers (1)

Answers (1)

Former Member
0 Kudos

Hi

The authorization objects are assigned to a role in tx. PFCG

There Authorizations tab and Change authorization Data you can refine the authorization objects assigned according to the transaction you has decided the role can execute.

Hope this help

Reward if useful

Jorge