Example
|
|
Standard Delivery |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
User type |
|
|
|
Field |
Field Description |
Object |
Auth. object text |
SAP TABLE |
Admin |
Super |
End user |
|
|
BUKRS |
Company Code |
F_BKPF_BUK |
Accounting Document: Authorization for Company Codes |
BKPF |
|
|
x |
|
|
BUKRS |
Company Code |
F_BNKA_BUK |
Banks: Authorization for Company Codes |
BNKA |
|
|
x |
|
|
BUKRS |
Company Code |
F_KNA1_BUK |
Customer: Authorization for Company Codes |
KNB1 |
|
|
x |
|
|
KKBER |
Credit Control area |
F_KNKA_KKB |
Credit Management: Authorization for Credit Control Area |
KNKA |
|
|
x |
|
|
BUKRS |
Company Code |
F_LFA1_BUK |
Vendor: Authorization for Company Codes |
LFB1 |
|
|
x |
|
|
BUKRS |
Company Code |
F_SKA1_BUK |
G/L Account: Authorization for Company Codes |
SKB1 |
|
|
x |
|
|
EKORG |
Purchasing Organization |
M_BEST_EKO |
Purchasing Organization in Purchase Order |
EKKO/EKPO |
|
|
x |
|
|
WERKS |
Plant |
M_BEST_WRK |
Plant in Purchase Order |
EKKO/EKPO |
|
|
x |
|
|
WERKS |
Plant |
M_MATE_WRK |
Material Master: Plants |
MARC |
|
|
x |
|
|
INFTY |
Infotype |
P_ORGIN |
HR: Master Data |
Depend on InfoType |
|
|
x |
|
|
PERSA |
Personnel Area |
P_ORGIN |
HR: Master Data |
Depend on table |
|
|
x |
|
|
VKORG |
Sales organization |
V_KNA1_VKO |
Customer: Authorization for Sales Organizations |
KNA1 |
|
|
x |
|
|
VKORG |
Sales organization |
V_VBAK_VKO |
Sales Document: Authorization for Sales Areas |
VBAK/VBAP |
|
|
x |
|
|
VKORG |
Sales organization |
V_VBRK_VKO |
Billing: Authorization for Sales Organizations |
VBRK/VBRP |
|
|
x |
|
|
DICBERCLS |
Authorization Group |
S_TABU_DIS |
Table Maintenance (via standard tools such as SM30) |
Depend on table |
|
|
x |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Customizing Example: |
|
|
|
|
|
|
|
|
|
Company code checked for all tables for all users: using the object below to control |
|
|
|
|
|||
|
|
Purchasing Organization checked for all tables starting with EK* for end-users only, using the object below |
|
|
|
|
|||
|
|
Check of Info Types for all users |
|
|
|
|
|
|
|
|
|
Check of controlling values for tables listed below |
|
|
|
|
|
||
|
|
|
|
|
|
|
|
|
|
|
|
Field |
Field Description |
Object |
Auth. object text |
SAP TABLE |
Admin |
Super |
End user |
|
a |
BUKRS |
Company Code |
F_BKPF_BUK |
Accounting Document: Authorization for Company Codes |
* |
x |
x |
x |
|
b |
EKORG |
Purchasing Organization |
M_BEST_EKO |
Purchasing Organization in Purchase Order |
EK* |
|
|
x |
|
b |
WERKS |
Plant |
M_BEST_WRK |
Plant in Purchase Order |
EK* |
|
|
x |
|
b |
WERKS |
Plant |
M_BEST_WRK |
Plant in Purchase Order |
T* |
|
|
x |
|
b |
WERKS |
Plant |
M_BEST_WRK |
Plant in Purchase Order |
V_* |
|
|
x |
|
c |
INFTY |
Infotype |
P_ORGIN |
HR: Master Data |
* |
x |
x |
x |
|
d |
VKORG |
Sales organization |
V_KNA1_VKO |
Customer: Authorization for Sales Organizations |
KNA1 |
|
|
x |
|
e |
DICBERCLS |
Authorization Group |
S_TABU_DIS |
Table Maintenance (via standard tools such as SM30) |
Depend on table |
|
|
x |
|
|
|
|
|
|
|
|
|
|
|
|
a) Controlling field is BUKRS for company code, object that should be checked is F_BKPF_BUK, check should be performed for all tables containing BUKRS |
|
||||||
|
|
b) Another example with wild-carding the table name, but checking on a specific field and object |
|
|
|
|
|||
|
|
c) Same as a), but for Infotype as field |
|
|
|
|
|
|
|
|
|
d) Controlling field mapped to specific object and specific table |
|
|
|
|
|||
|
|
e) Customizing item if table level should be checked (S_TABU_DIS) |
|
|
|
|
|||