This website is not affiliated with, sponsored by, or approved by SAP AG.

Help with roles

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

Help with roles

Postby Zarach » Thu Nov 29, 2012 1:05 pm

Hi , i have a little problem with roles and authorization objetcs.
i want to give access to a user to use FBL3N transaction in one company XXXX and one business area BBBB.
and the user has to have access to FBL1N and FBL5N in the same compay XXXX and other busines area CCCC.

my problem is that this is controlled by F_BKPF_KOA object and F_BKPF_GSB object.
in one role the user has access to F_BKPF_KOA = 'GL ACCOUNTS' and F_BKPF_GSB = 'BBBB'
and in another role the user has access to F_BKPF_KOA = 'VENDORS' and F_BKPF_GSB = 'CCCC'

this results that user has access to vendors and gl accounts account type in business area CCCC AND BBBB.
and this is no good.

as F_BKPF_KOA and F_BKPF_GSB are checked one by one the user has more access that i want.

how can limit the access to the user to give him the access i want??

thanks
Zarach
 
Posts: 9
Joined: Thu Jun 14, 2012 7:09 am

Re: Help with roles

Postby Al. » Thu Nov 29, 2012 5:24 pm

Hi,

Your options are:

1. Customisation (to allow additional checks to provide control where required)
2. Accept it (what is the unacceptable risk that has been identified?)
http://www.turnkeyconsulting.com/
Al.
 
Posts: 3050
Joined: Tue Feb 25, 2003 5:35 am
Location: London


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 2 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.