Ansicht
Dokumentation
OHIXXT77S0_AUTSW - Maintain Authorization Main Switches
ABAP Short Reference SUBST_MERGE_LIST - merge external lists to one complete list with #if... logic for R3upThis documentation is copyright by SAP AG.
In this step you maintain the main authorization switches and, if necessary, adapt the profile generator specifications. You must edit the profile generator specifications if you intend to make changes to the main switch settings.
You can use the transaction HR: Main Authorization Switch (OOAC) to edit the authorization main switch.
You can use the transaction Auth. object check under transactions (SU24) to maintain whether a transaction checks an authorization and/or whether the relevant authorizations for maintenance are available in the profile generator.
The profile generator recognizes whether authorization objects are used in transactions based on the
check indicator set. You can also use the transaction Auth. object check under
transactions (SU24) to edit this manually. Also check the individual authorization objects under
Process check status in all transactions. Ensure that the following check indicators are set:
- When you activate the authorization objects HR: Master data (P_ORGIN),
HR: Master data - extended check (P_ORGXX) and HR:
Master data - personnel number check (P_PERNR), you must set the relevant check/maintain
check status in the primary transactions that access these objects. You recognize these in the standard
system because the check indicator is set to check/maintain (PP) for the
object HR: Master data (P_ORGIN). In addition to this, please note the examples below.
- When you deactivate the authorization object HR: Master data (P_ORGIN), you must reset the check indicator for the authorization object HR: Master data (P_ORGIN) from check/maintain (PP) to check (P).
Example (1):
The object HR: Master data (P_ORGIN) is activated, the objects HR: Master data - extended check (P_ORGXX) and HR: Master data - personnel number check (P_PERNR) objects are deactivated.
No customer action is necessary.
Example (2):
The object HR: Master data - extended check (P_ORGXX) is activated, the objects HR: Master data (P_ORGIN) and HR: Master data - personnel number check (P_PERNR) objects are activated. You must set the following check status:
For the object HR: Master data - extended check (P_ORGXX), copy the default check indicator of the object HR: Master data (P_ORGIN). Then you change the check indicator of the object HR: Master data (P_ORGIN) from check/maintain (PP) to check (P). For the object HR: Master data - personnel number check (P_PERNR), you leave the predefined check indicator as it is.
In the standard system the main authorization switches and settings are defined as follows:
| Switch | Setting |
|---|---|
| HR: Tolerance time of the authorization check (ADAYS) | 15 |
| HR: Check procedure (APPRO) | 0 |
| HR: Customer authorization check (NNNNN) | 0 |
| HR: Master data (ORGIN) | 1 |
| HR: Structural authorization check (ORGPD) | 1 |
| HR: Master data - extended check (ORGXX) | 0 |
| HR: Master data - personnel number check (PERNR) | 0 |
| HR: Blocking personnel numbers for certain country/region (BLOCK) | 0 |
Note
For information on the settings of the main authorization main switches INCON, XXCON, DFCON, and NNCON that you require for the context authorization check, see the documentation for the activity Edit Context Main Authorization Switches.
For information on the configuration of the main authorization switch BLOCK, see the documentation for the activity BAdI: Block Personnel Numbers.
If you are using a customized authorization object (P_NNNNN), you need to maintain this in the transaction Auth. object check under transactions (SU24) in the same way as for the objects HR: Master data (P_ORGIN), HR: Master data - extended check (P_ORGXX) and HR: Master data - personnel number check (P_PERNR).
Example:
If the switch is deactivated for the objects HR: Master data (P_ORGIN) and HR: Master data - extended check (P_ORGXX) and is activated for the customer object (P_NNNNN) and the object HR: Master data - personnel number check (P_PERNR), for the customer object (P_NNNNN) and the object HR: Master data - personnel number check (P_PERNR), you need to reset the check indicator - in accordance with the settings for the object HR: Master data (P_ORGIN) in the standard system - to check/maintain (PP); and for the objects HR: Master data (P_ORGIN) and HR: Master data - extended check (P_ORGXX), you need to reset it to check.
General Data in Customer Master General Data in Customer Master
This documentation is copyright by SAP AG.
Length: 7276 Date: 20240523 Time: 235645 sap01-206 ( 127 ms )
