Granting user access to cost centers through SAP authorization objects

Granting user access to cost centers through SAP authorization objects

I need to give a user access to all cost elements within a cost center.

However, I also need to give them access to one cost element across all cost centers. This seems to negate the restrictions in the above role. How can I fix this?

    Requires Free Membership to View

    When you register, you will start receiving targeted emails from my award-winning team of editorial writers. Our goal is to keep you informed on the hottest topics and biggest challenges faced by SAP professionals today.

    Hannah Smalltree, Editorial Director

    By submitting your registration information to SearchSAP.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSAP.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

This can be done easily. Object K_CCA CO-CCA: Gen. Authorizations for Cost Center Accounting have fields for cost center and cost element. Create two SAP authorization objects. In one, enter the single cost center where all cost elements are allowed in the cost center field and an * in the cost element field.

In the other authorization object, enter an * in the cost center field and the single cost element in the cost element field. SAP authorizations are never aggregated to determine whether a user can access data or not. They are tested one at a time using or logic. Just think of a key chain and that ever key in the key chain is tested in the lock one at a time.

This was first published in March 2010