Ansicht
Dokumentation

SIMG_CFMENUORFCSU03 - Define authorizations

ABAP Short Reference   General Material Data  
This documentation is copyright by SAP AG.

In this step, you can create roles and use the profile generator to generate authorization profiles.

To assign an authorization profile to a user, do the following:

1. Create a role
2. Enter a description
3. Select transactions
4. Create and edit authorizations
5. Assigns users and compare the user master (in doing so, the profile is entered in the user's master record)
6. Transport roles, if desired

Detailed documentation

For more information about the procedures, see transaction documentation

See also the general documentation on the Profile Generator in the SAP Library. Choose:
Basis Components → Computing Center Management System → Users and Roles or in the Implementation Guide (IMG), choose: Basis Components → System Administration → Users and Authorizations → Maintain Authorizations and Profiles using Profile Generator.

Note

You can also use authorization profiles you created manually or were delivered by SAP, in roles. You can create a role without a menu and include the corresponding profile in the authorization data of the role.

In the fourth step, choose "Edit -> Add authorization -> From profile" to add the authorization profile data to the role.

The following list shows which authorization objects exist in the Consolidation component.

Totals reports	F_LC_AUS
Data entry forms	F_LC_ERH
Companies	F_LC_COM
Ledger	F_LC_LDNR
Subgroup	F_LC_SUBD
Versions	F_LV_VERS
Update run	F_LC_URUN

"Totals reports" also includes the functions of Interactive Reporting.

The following list shows you which authorization objects from other application areas are checked by the individual functions in Consolidation:

Acctg doc.: Company codes	F_BKPF_BUK
Acctg doc.: Business areas	F_BKPF_GSB
Acctg doc.: Account types	F_BKPF_KOA
G/L accts: Company code	F_SKA1_BUK
G/L accts: Acct authoriztn	F_SKA1_BES
Customer: Application auth.	F_KNA1_APP
Vendor: Application auth.	F_LFA1_APP
S/P Ledger: Ledger	G_881_GRLD
S/P Ledger: Set	G_800S_GSE
Valid./Substit./Rules: Rules	G_GB90_
Valid./Substit./Rules: Validtn	G_GB93_
S/P Ledger: Central admin.tools	G_ADMI_CUS
Report Writer: Report group	G_803J_GJB
SAP-EIS: Database	K_KC_DB

On a more technical level, you can also control authorization for accessing Consolidation tables. These are divided into the following classes:

FKS1	Critical control tables
FKS2	Control tables for consolidation functions
FKS3	Control tables for data entry and reporting functions
FKMD	Master data tables
FKRD	Tables for financial reporting data

The standard SAP system uses the profile F_FILC_ALL for the Consolidation component (FI-LC). .

Description of the authorization objects

Object: F_LC_AUS Standard reports

Object: F_LC_ERH Data entry forms

Object: F_LC_COM Companies

Object: F_LC_LDNR Ledger

Object: F_LC_SUBD Subgroup

Object: F_LC_VERS Versions

Object: F_LC_URUN Update run

Object: F_BKPF_BUK Accounting doc.: Company code authorization

Objekt: F_BKPF_GSB Accounting doc.: Business area authorization

Objekt: F_BKPF_KOA Accounting doc.: Account type authorization

Objekt: F_SKA1_BUK G/L account: Company code authorization

Objekt: F_SKA1_BES G/L account: Account authorization

Objekt: F_KNA1_APP Customer: Application authorization

Objekt: F_LFA1_APP Vendor: Application authorization

Objekt: G_881_GRLD Special Purpose Ledger - Customizing: Ledger

Objekt: G_800S_GSE Special Purpose Ledger - Sets: Set

Objekt: G_GB90_ Validation/Substitutions/Rules: Rules

Objekt: G_GB93_ Validation/Substitutions/Rules: Validation

Objekt: G_ADMI_CUS Spec. Purpose Ledger - Central administrative tools

Objekt: G_803J_GJB Report Writer: Report group

Objekt: K_KC_DB SAP-EIS Database authorization

TXBHW - Original Tax Base Amount in Local Currency   BAL_S_LOG - Application Log: Log header data  
This documentation is copyright by SAP AG.

Length: 7642 Date: 20240523 Time: 221111     sap01-206 ( 115 ms )