Hierarchy
SAP_BASIS (Software Component) SAP Basis Component⤷
BC-SEC-USR-ADM (Application Component) User and Authorization Management⤷
SUSR (Package) ABAP User Administration
Basic Data
| Data Element | BRGRU |
| Short Description | Authorization Group |
Data Type
| Category of Dictionary Type | D | Domain |
| Type of Object Referenced | No Information | |
| Domain / Name of Reference Type | BRGRU | |
| Data Type | CHAR | Character String |
| Length | 4 | |
| Decimal Places | 0 | |
| Output Length | 4 | |
| Value Table | TBRG |
Further Characteristics
| Search Help: Name | ||
| Search Help: Parameters | ||
| Parameter ID | ||
| Default Component name | AUTH_GROUP | |
| Change document | ||
| No Input History | ||
| Basic direction is set to LTR | ||
| No BIDI Filtering |
Field Label
| Length | Field Label | |
| Short | 10 | Authoriz. |
| Medium | 15 | Authorization |
| Long | 21 | Authorization Group |
| Heading | 4 | AuGr |
Documentation
Definition
The authorization group allows extended authorization protection for particular objects. The authorization groups are freely definable. The authorization groups usually occur in authorization objects together with an activity.
Supplementary Documentation - BRGRU 0001
Use
Procedure
You assign the authorization using authorization object F_KNA1_BED.
Examples
Dependencies
Supplementary Documentation - BRGRU 0002
Use
Procedure
You assign the authorization using authorization object F_LFA1_BEK.
Examples
Dependencies
Supplementary Documentation - BRGRU 0003
Use
Procedure
You assign the authorization using authorization object F_SKA1_BES.
Examples
Dependencies
Supplementary Documentation - BRGRU 0004
Use
A posting period can be made available to only a limited set of users using the authorization group.
Procedure
If only a limited set of users is to be able to post in a particular posting period, proceed as follows:
- Add the posting period authorization (authorization object F_BKPF_BUP) to the authorizations of the selected users. Assign an authorization group (e.g. '0001').
- Enter the account type '+' for the posting period variant to which the restriction is to apply. Enter the period(s) whose use is to be restricted in the first period, those which are available to all users in the second period, and the authorization group (e.g. '0001') in the last column.
Examples
A posting period can be successively restricted. If, e.g. 10 users have the posting period authorization with authorization group '0001', and 3 of these 10 users also with authorization group '0002'.
If the period is only to be accessible to the 10 selected users the authorization group '0001' is entered in the posting period variant. Access can later be restricted to the remaining 3 users by entering '0002'.
Supplementary Documentation - BRGRU 0010
Use
Procedure
You assign the authorization with the authorization object F_KMT_MNGT.
Examples
Dependencies
Supplementary Documentation - BRGRU 0020
Use
In FI-SL the authorization group is used in the following authorization objects:
- G_800_GRP Report-Writer: Report
- G_803J_GJB Report-Writer: Report group
- G_801K_GLB Report-Writer: Library
- G_801H_GCL Report-Writer: Parallel report
- G_801U_GSY Report-Writer: Standard layout
- G_GB90_ Validation/Substitution/Rules: Rules
- G_GB92_ Validation/Substitution/Rules: Substitution
- G_GB93_ Validation/Substitution/Rules: Validation
- G_820_GPL Special Ledger - Planning: Plan parameter
- G_821S_GSP Special Ledger - Planning: Distribution key
- G_806H_GRJ Special Ledger - Rollup
- G_800S_GSE Special Ledger - Sets: Set
- G_802G_GSV Special Ledger - Sets: Variables
Procedure
Maintain the table/view V_TBRG using the extended table maintenance for the authorization object in question.
Perform function
Examples
If you want to define the authorization group 'TEST' for Sets, you must proceed as follows:
- Choose the table/view V_TBRG maintenance
- Enter G_800S_GSE as authorization object
- Enter 'TEST' in the table/view
Dependencies
Supplementary Documentation - BRGRU 0021
Use
If you want to maintain authorization groups for cost centre summaries, you must use the authorization object
G_806H_GRJ Special Ledger - Rollup
Procedure
Maintain the table/view V_TBRG, using the extended table maintenance, for the authorization object G_806H_GRJ.
Perform function
Examples
If you want to define the authorization group 'TEST' for the cost center summaries, you must proceed as follows:
- Choose the table/view V_TBRG maintenance
- Enter G_806H_GRJ as authorization object
- Enter 'TEST' in the table/view
Note
You will find the authorization object 'G_806H_GRJ Special Ledger - Rollup' among the authorization objects in the financial accounting.
History
| Last changed by/on | SAP | 20041216 |
| SAP Release Created in |
