Maintain Authorization Main Switches

In this step you maintain the authorization switch and adapt, if necessary, the profile generator specifications. You must process the profile generator specifications if you intend to make changes to the main switch settings.

You can process the authorization main switch using transaction HR: Authorization main switch (OOAC).

Using the Auth.object check under transactions transaction (SU24) you maintain whether a transaction checks an authorization and/or whether the relevant authorizations are offered in the profile generator for maintenance.

The profile generator recognises whether authorization objects are used in transactions using the legal check status. You can process this manually, also using the Auth.object check under transactions transaction (SU24). Also check the individual authorization objects under Process check status in all transactions. Ensure that the following check indicators are set:

  • When you switch on the HR: Master data (P_ORGIN), HR: Master data - extended check (P_ORGXX) and HR: Master data - personnel number check (P_PERNR) authorization objects, you must set the relevant check/maintain check status in the primary transaction that accesses these objects. You recognise these in the standard system, because the check indicator is set to check/maintain (PP) for the HR: Master data (P_ORGIN) object. In addition to this, please note the example below.
  • When you switch off the HR: Master data (P:ORGIN) authorization object, you must reset the check indicator for the HR: Master data (P_ORGIN) authorization object from check/maintain (PP) to check (P).

Example (1):

The HR: Master data (P_ORGIN) object is swtiched on, the HR: Master data - extended check (P_ORGXX) and Master data - personnel number check (P_PERNR) objects are switched off.

No customer action is necessary.

Example (2):

The HR:Master data - extended check (P_ORGXX) object is switched on, the HR: Master data (P_ORGIN) and HR: Master data - personnel number check (P_PERNR) objects are switched on. You must set the following check status:

For the HR:Master data - extended check (P_ORGXX) object, copy the default check indicator of the HR: Master data (P_ORGIN) object. Then change the check indicator of the HR: Master data (P_ORGIN) object from check/maintain (PP) to check (P). Leave the given check status for the HR: Master data - personnel number check (P_PERNR) object as it is.

Standard Settings

In the standard system the authorization main switches and settings are defined as follows:

Switch Setting

HR: Tolerance time of the authorization check (ADAYS) 15

HR: Check procedure (APPRO) 0

HR: Customer authorization check (NNNNN) 0

HR: Master data (ORGIN) 1

HR: Structural authorization check (ORGPD) 1

HR: Master data - extended check (ORDXX) 0

HR: Master data - personnel number check (PERNR) 0

Further Notes

When you use a customer authorization object (P_PNNNN) you must maintain it in the Auth. object check under transactions transaction, analogous to the HR: Master data (P_ORGIN), HR: Master data - extended check (P_ORGXX) and HR: Master data - personnel number check (P_PERNR) objects.

Example:

When the switch is off for the HR: Master data (P_ORGIN) and HR: Master data - extended check (P_ORGXX) objects and is on for the customer object (PNNNN) and HR: Master data - personnel number check (P_PERNR) object, you must reset the check status for these - corresponding to the setting of the HR: Master data object (P_ORGIN) in the standard system - to check/maintain (PP), and for the HR: Master data (P_ORGIN) and HR: Master data - extended check (P_ORGXX) to check.