Skip to Content

In this blog, I try to explain how to find the required values of an authorization object in SAP CRM. In my previous blog  * Full Authorization! Pitfalls., I tried to explain about the ease of using of “*” and the pitfalls to it. Here I will give some inputs that will enable us to figure out the various options which we can choose from and decide which values can be added to an authorization object.

There are two parts to an CRM authorization – UIU and non UIU authorizations. Here I will illustrate the mistakes done and what could have been the ideal way to do it.


Example 1 – UIU component objects. Below is the screen shot of UIU Component objects

/wp-content/uploads/2014/11/u11_585627.jpg

Ideally the picture should have been like the one below. But the question is how we know that which value has to be entered as the F4 help doesn’t give you any options in case of UIU 😕 . You might figure out the Component name ( which come automatically via upload in the menu using CRMD_UI_ROLE_PREPARE in SE38), but which  inbound plug and Component Window should be used. You might say at this point that Inbound Plug will be create, edit or search or in case of Window name will be Main Window. But many times this might not be the case and we need to figure out what are values in relation to the component.

/wp-content/uploads/2014/11/u22_585632.jpg

In case of UIU component  we go to SE16

/wp-content/uploads/2014/11/u33_585633.jpg

Add the component name  and execute (alternatively  you can use this table for other use as well, for example using target id, inbound plug to find other parameters).

/wp-content/uploads/2014/11/44_585650.jpg

Here you get the list all combinations which can be used to give UIU authorizations. And add accordingly according to the business requirement.

  /wp-content/uploads/2014/11/77_585654.jpg

Example 2 – Non UIU component authorization objects

/wp-content/uploads/2014/11/99_585659.jpg

In case of second example we can easily find the various options available via the F4 help.

  /wp-content/uploads/2014/11/102_585636.jpg

And add the authorization objects accordingly

  /wp-content/uploads/2014/11/103_585637.jpg

To report this post you need to login first.

11 Comments

You must be Logged on to comment or reply to a post.

  1. Bo Liu

    Very good. It’s especially useful for the Zcomponment to set up auth profile.

    We also can run the program “CRMD_UI_ROLE_PREPARE” to generate menu for the corresponding PFCG role.  The auth profile will include both the UIU and non-UIU auth objects.

    (0) 

Leave a Reply