FAQ: PM/CS Authorisation Objects

Please contribute:

SAP Standard Authorisation Objects:

Auth Object	Description
/***/CPEDT	Authorization object for TA /***/DESIGN [IWERK]
/***/EFEDT	Authorization object for TA /***/DESIGN [IWERK]
C_AFKO_ACT	Activities on network header level [PS_ACTVT]
C_AFKO_AWK	CIM: Plant for order type of order [WERKS, AUFART]
C_AFKO_DIS	Network: MRP Group (Plant) and Transaction Type [WERKS, DISPO, TRTYP]
I_AER	Follow-Up Order Creation [IWERK, AUFART]
I_ALM_ME	Mobile Asset Management [ACTVT]
I_AUART	Order Type [IWERK, AUFART]
I_BEGRP	Authorization Group [TCD, BEGRP]
I_BETRVORG	Business Operation [BETRVORG]
I_CCM_ACT	Configuration Control authorization object [CCACT, ACTVT]
I_CCM_EBOM	CCM BOM Item Maintenance [ACTVT]
I_CCM_STRC	Structure gap maintenance authority [ACTVT]
I_CONFSTOR	Mass Cancellation of Confirmations [ICONFSTOR]
I_IE4N	Object for IE4N Modes [ACTVT, IE4N_MODE]
I_ILOA	Change location and accounting data in order [IWERK, AUFART]
I_INGRP	Maintenance Planner Group [TCD, IWERK, INGRP]
I_IWERK	Maintenance Planning Plant [TCD, IWERK]
I_KOSTL	Cost Centres [TCD, KOKRS, KOSTL]
I_MASS	Mass Data Change [IMASS]
I_QMEL	Notification Types [TCD, QMART]
I_ROUT	Task List [ACTVT]
I_ROUT1	Task Lists by PM Planning Plant, Work Sched., Status [TCD, IWERK, VAGRP, STATU]
I_SOGEN	Permit [SWERK, PMSOG]
I_SWERK	Maintenance Plant [TCD, SWERK]
I_TCODE	Transaction Code [TCD]
I_VORG_MEL	Business Operation for Notifications [QMART, BETRVORG]
I_VORG_MP	Business Operation for Maintenance Planning [MPTYP, BETRVORG]
I_VORG_ORD	Business Operation for Orders [AUFART, BETRVORG]
I_WPS_MEB	Maintenance Event Builder [DIWPSMEBAR]
I_WPS_REV	Revision authorization object [REVTY, ARBPL, WERKS, WPS_REV_AC]
M_BANF_BSA	Document Type in Purchase Requisition [ACTVT, BSART]
M_BANF_EKO	Purchasing Group in Purchase Requisition [ACTVT, EKGRP]
M_BANF_EKG	Purchasing Organization in Purchase Requisition [ACTVT, EKORG]
M_BANF_WRK	Plant in Purchase Requisition [ACTVT, WERKS]
PM_SIGN_AU	Reset Digital Signatures in PM Order [ACTVT]
Q_GP_CODE	Code groups [QCODEGRP, QKATART]
S_NUMBER	Number Range Maintenance [NROBJ, ACTVT]
C_TCLA_BKA	Authorization for Class Types [KLART]
S_ALV_LAYO	ALV Standard Layout [ACTVT]

To confirm:

C_AFRU_APL: Confirmations [ARBPL, TRTYP, WERKS]

C_AFRU_AWK: Confirmations [ACTVT, AUFART, WERKS]

Authorisation Tables:

Table	Description
TOBJ	Authorisation objects
TOBJT	Authorisation object texts
AGR_1250	Authorisation object assigned to role
AGR_USERS	Users assigned to a role
AGR_TCODES	Assignment of roles to TCodes

Authorisation Objects for System-Statuses:

Object	Description
Order	I_VORG_ORD [AUFART, BETRVORG] (REL = BFRE, TECO = BTAB, delete component = RMKL)
Notification	I_VORG_MEL [QMART, BETRVORG (NOPR = PMM2, NOCO = PMM4)]
Maintenance plan	I_VORG_MP [MPTYP, BETRVORG]

Authorisation Objects for User-Statuses:

B_USERSTAT (TCode BS52)

User-Exits:

User-Exit	Description
CPAU0001	Enhancement for Authorization Check in Task Lists
IMRC0005	Measure point: Exit in AUTHORITY_CHECK_IMPT
IWOC0003	PM/SM authorization check of ref. object and planner group
IWO10033	Customer-Specific Authorization Check Maint./Service Order ->> use BADI IWO1_ORDER_BADI method AUTHORITY_CHECK_AUART_ACTIVIT instead
QQMA0026	PM/SM: Auth. check when accessing notification transaction
QQMA0030	Check validity of status change

BADIs:

BADI	Description
DIP_SET_USERSETTINGS	Initial Object Check in DP Processor
INST_AUTHORITY_CHECK	PM/CS Enhanced Authorization Checks
IWO1_ORDER_BADI	Maintenance, Service, and Refurbishment Order
NOTIF_AUTHORITY_01	Additional Authorization Checks for the Notification
WORKORDER_GOODSMVT	PM/PP/PS/PI orders: auto. goods movement
WO1_ORDER_BADI	Method AUTHORITY_CHECK_AUART_ACTIVIT

Authorisation Groups:

These can be created via TCode SM30 and table T370B. They can then be assigned to the following objects:

Equipment (IE02)
Functional Locations (IL02)
Maintenance plans (IP02)
Entry List for Measurement Documents (IK32)
Object links (IN05, IN08)

Authorisation Debugging:

TCode SU53: Evaluate Authorization Check

BETRVORG Settings (BS33):

The business transactions relevant in maintenance are stored in table T354B, the corresponding language-dependent texts are stored in table TJ01T.

Business Transaction	Description
BABL	Wrap
BABS	Complete
BFRE	Release
BLOC	Lock
BTAB	Technically complete (TECO)
BUAB	Revoke status “Closed”
BUNL	Unlock
BUTA	Revoke technical completion
DELH	Delete Historical Order
INAK	Set object inactive
INAZ	Reset object inactive
KABV	Maintain settlement rule
LKZS	Set deletion indicator
LVMS	Mark for deletion
LVMZ	Remove deletion flag
PMM1	Postpone notification
PMM2	Put notification in process (NOPR)
PMM3	Assign order (ORAS)
PMM4	Complete notification (NOCO)
PMM5	Print Message
PMM6	Put notif. in process again
PMM7	Terminate order assignment
PMM8	Mark for deletion
PMM9	Remove deletion flag
PMMA	Archive notification
PMMB	Assign sales order (SOAS)
PMO7	Change of material
PMS1	Goods receipts
PMS5	Delivery to customer
PMS7	Return to stock
PMS8	Goods issues
PMTB	Delete assignment to HU
PMTD	Delete physical invent. active
QN40	Release Task
QN41	Complete Task
QN42	Task successful
RMDR	Print order
RMKE	Determine costs
RMTM	Schedule order
RMVM	Check material availability