Hierarchy
⤷ PA-PA (Application Component) Personnel Administration
⤷ PBAC (Package) Customizing HR Master Data
IMG Activity
ID | OHIXXT77S0_AUTSW | Maintain Authorization Main Switches |
Transaction Code | S_AHR_61011799 | (empty) |
Created on | 19990127 | |
Customizing Attributes | OHIXXT77S0_AUTSW | Maintain authorization main switches |
Customizing Activity | OHIXXT77S0_AUTSW | Maintain authorization main switches |
Document
Document Class | SIMG | Hypertext: Object Class - Class to which a document belongs. |
Document Name | OHIXXT77S0_AUTSW |
In this step you maintain the authorization switches and adapt, if necessary, the profile generator specifications. You must edit the profile generator specifications if you intend to make changes to the main switch settings.
You can edit the authorization main switches using transaction HR: Authorization main switch (OOAC).
Using the Auth.object check under transactions transaction (SU24) you maintain whether a transaction checks an authorization and/or whether the relevant authorizations are offered in the profile generator for maintenance.
The profile generator recognises whether authorization objects are used in transactions using the legal check status. You can process this manually, also using the Auth.object check under transactions transaction (SU24). Also check the individual authorization objects under Process check status in all transactions. Ensure that the following check indicators are set:
- When you switch on the HR: Master data (P_ORGIN), HR: Master data - extended check (P_ORGXX) and HR: Master data - personnel number check (P_PERNR) authorization objects, you must set the relevant check/maintain check status in the primary transaction that accesses these objects. You recognise these in the standard system because the check indicator is set to check/maintain (PP) for the HR: Master data (P_ORGIN) object. In addition to this, please note the examples below.
- When you switch off the HR: Master data (P:ORGIN) authorization object, you must reset the check indicator for the HR: Master data (P_ORGIN) authorization object from check/maintain (PP) to check (P).
Example (1):
The HR: Master data (P_ORGIN) object is swtiched on, the HR: Master data - extended check (P_ORGXX) and Master data - personnel number check (P_PERNR) objects are switched off.
No customer action is necessary.
Example (2):
The HR:Master data - extended check (P_ORGXX) object is switched on, the HR: Master data (P_ORGIN) and HR: Master data - personnel number check (P_PERNR) objects are switched on. You must set the following check status:
For the HR:Master data - extended check (P_ORGXX) object, copy the default check indicator of the HR: Master data (P_ORGIN) object. Then change the check indicator of the HR: Master data (P_ORGIN) object from check/maintain (PP) to check (P). Leave the given check status for the HR: Master data - personnel number check (P_PERNR) object as it is.
Standard settings
In the standard system the authorization main switches and settings are defined as follows:
Switch Setting
HR: Tolerance time of the authorization check (ADAYS) 15
HR: Check procedure (APPRO) 0
HR: Customer authorization check (NNNNN) 0
HR: Master data (ORGIN) 1
HR: Structural authorization check (ORGPD) 1
HR: Master data - extended check (ORDXX) 0
HR: Master data - personnel number check (PERNR) 0
Note
For the information on the settings of the authorization main switches INCON, XXCON, DFCON, and NNCON that you require for the context authorization check, see the documentation of the IMG activity Edit Context Authorization Switches.
Further notes
When you use a customer authorization object (P_PNNNNN) you must maintain it in the Auth. object check under transactions transaction, analogous to the HR: Master data (P_ORGIN), HR: Master data - extended check (P_ORGXX) and HR: Master data - personnel number check (P_PERNR) objects.
Example:
When the switch is off for the HR: Master data (P_ORGIN) and HR: Master data - extended check (P_ORGXX) objects and is on for the customer object (P_NNNNN) and HR: Master data - personnel number check (P_PERNR) object, you must reset the check status for these - corresponding to the setting of the HR: Master data object (P_ORGIN) in the standard system - to check/maintain (PP), and for the HR: Master data (P_ORGIN) and HR: Master data - extended check (P_ORGXX) to check.
Business Attributes
ASAP Roadmap ID | 209 | Establish Authorization Management |
Mandatory / Optional | 2 | Optional activity |
Critical / Non-Critical | 2 | Non-critical |
Country-Dependency | A | Valid for all countries |
Assigned Application Components
Documentation Object Class | Documentation Object Name | Current line number | Application Component | Application Component Name |
---|---|---|---|---|
SIMG | OHIXXT77S0_AUTSW | 0 | HLA0100326 O HLA0009705 O HLB0100231 |
Maintenance Objects
Maintenance object type | C | Customizing Object |
Assigned objects | ||||||
---|---|---|---|---|---|---|
Customizing Object | Object Type | Transaction Code | Sub-object | Do not Summarize | Skip Subset Dialog Box | Description for multiple selections |
OOAC | T - Individual transaction object | OOAC | AUTSW | Maintain authorization main switches | ||
SU24 | T - Individual transaction object | SU24 | AUTSW | Modify profile generator standard values |
History
Last changed by/on | SAP | 19991028 |
SAP Release Created in |