Function documentationAuthorizations for Tasks

 

You use this function to grant various privileges for accessing consolidation tasks to persons who work with the Consolidation system.

Note Note

To assign authorizations for the customizing of tasks, follow the steps described in Authorizations for Master Data.

End of the note.

Integration

The authorization concept of consolidation is embedded in the SAP authorization concept.

Prerequisites

  • In the consolidation workbench, you have created the consolidation areas for which you want to customize the authorizations for tasks. You have completed the Customizing settings for the consolidation tasks:

    • You have customized the individual tasks

    • You have set up the task hierarchy and sequence as well as the hierarchy of consolidation units to be able to execute the tasks in update mode

    For more information, see Consolidation Area and Task Sequence.

  • To ensure that the system considers the Complete Technically activity in the authorization check, in the configuration menu for consolidation (transaction UC00), under the Tasks node, you need to select the entry Authorization Check in the Case of Block by User Intervention in the first column and enter X in the Characteristic Value column.

Features

You can assign authorizations for:

  • Executing tasks in both update mode and test mode

  • Blocking and unblocking tasks

  • Changing the status of tasks

  • Displaying the last log

  • Deleting task logs

The consolidation monitor checks the authorizations of the user for each activity. If the user has the necessary authorization, the system carries out the activity. Otherwise, the system issues an error message.

Authorization Assignment

The authorizations apply to each separate consolidation area.

You can restrict authorizations to the following, status-relevant characteristics:

  • Specific versions

  • Specific group currencies

  • Specific consolidation groups

  • Specific consolidation units

  • Specific restatements

You assign authorizations using authorization object R_UC_TASK. This authorization object has the following fields:

  • Activity, which has the following attributes:

    • Block task

    • Unblock task

    • Execute task in update mode

    • Extended maintenance

      You use the Extended Maintenance activity to assign authorizations for changing comments in documents.

    • Execute task in test mode (simulation)

    • Change status of task

    • Display last log

    • Complete technically

      You use the Complete Technically activity to assign authorizations for blocking tasks by user intervention.

    • Delete own extracts

      You use the Delete own extracts activity to assign authorizations for deleting task logs.

  • Consolidation area

  • Task

    All tasks within the consolidation area are available.

  • Fields 1 through 7

    All characteristics with the following roles are available:

    • Version

    • Group Currency

    • Consolidation group

    • Consolidation unit

    If there are more than seven fields for restricting the authorization, enter all characteristics that you want to use for restricting the authorization in Customizing for the consolidation area. These characteristics are then available automatically when you maintain the roles.

Authorizations for Consolidation Groups and Units

The authorizations you set up for consolidation groups also apply to that group’s lower-level consolidation groups and units (see Example 2 below).

To execute the following tasks, a user requires authorization for the consolidation units involved:

  • Postings to posting levels 00, 01, or 10

  • Validation of reported financial data

  • Validation of standardized financial data

  • Reconciliations

To execute all other tasks, a user requires authorization for the respective consolidation group. A user also requires authorizations for lower-level consolidation groups to execute the following tasks:

  • Postings to posting levels 02, 12, 22, and 30

  • Validations of consolidated financial data

Activities

To assign authorizations for tasks, you make the following Customizing settings:

A. Customizing for the Consolidation Area

If you have more than seven fields for restricting task authorizations, specify which characteristics you want to use to restrict authorizations as follows:

  1. Navigate to the process view of the Consolidation Workbench and choose Start of the navigation path Data Model Next navigation step Consolidation Area End of the navigation path.

  2. Open the required consolidation area in change mode.

  3. On the Fields tab page, in the Auth.Check column (with the quick info text Char. Used in Auth.Check of Tasks), select the indicator for those characteristics you want to use to restrict authorizations. (You can do this for up to seven characteristics.)

  4. Save the consolidation area.

B. Customizing in Role Maintenance (Transaction PFCG)

  1. In the local system, start role maintenance from the SAP Easy Access screen by choosing Start of the navigation path Tools Next navigation step Administration Next navigation step User Maintenance Next navigation step Role Administration Next navigation step Roles End of the navigation path.

  2. Specify an existing role or create a new role.

  3. In role maintenance, navigate to the Authorizations tab page and choose Change Authorization Data.

  4. Under Start of the navigation path Strategic Enterprise Management Next navigation step SEM-BCS: Authorization Check for Task End of the navigation path, specify the authorizations:

    • Consolidation area

    • Activity (or combination thereof; wildcard (*) possible)

    • Task (or multiple tasks; wildcard (*) possible)

    • If applicable, other characteristics with the following roles (combination and wildcard (*) possible):

      • Version

      • Group currency

      • Consolidation group

      • Consolidation unit

      Caution Caution

      Until Release 3.1B, space characters (' ') and asterisks (*) were used as wildcards for all values. As of Release 3.2, entering an asterisk (*) for the consolidation unit grants the authorization to all existing consolidation units for posting levels 01-10.

      End of the caution.

  5. Save the authorizations.

  6. Generate the role.

D. Checking Authorizations (System Activity)

Once you have completed the Customizing settings, the system can run an authorization check for the activities in the consolidation monitor based on your definitions.

Example

Example 1

You want to grant the following authorizations to a group of users in consolidation area 01 in all versions:

  • For data collection tasks and for consolidation groups A–C, you assign the following authorizations:

    • Block task

    • Unblock task

    • Execute task in test mode (simulation)

    • Execute task in update mode (execution)

    • Change task status

    • Display last log

  • For all other tasks and all other consolidation groups (D–H), you assign the following authorization:

    • Execute task in test mode (simulation)

You can achieve the authorization assignments by configuring the following Customizing settings: In role maintenance, you specify the following parameters for the required role (under Start of the navigation path Strategic Enterprise Management Next navigation step SEM-BCS: Authorization Check for Task End of the navigation path):

Manual: Authorization check for task

Activity

  • Block

  • Unblock

  • Simulate

  • Execute

  • Change status

  • Display

Consolidation area

01

Task

Collection of reported financial data, collection of additional financial data

1. Characteristic

Consolidation group

A–C

2. Characteristic

Consolidation unit: Company

' ' (space)

3. Characteristic

Version

*

4. Characteristic

Group currency

*

5. Characteristic

*

6. Characteristic

*

7. Characteristic

*

Manual: Authorization check for task

Activity

Simulate

Consolidation area

01

Task

  • Balance carryforward

  • Validation of reported financial data

  • Standardization of reported financial data

  • Reconciliation

  • Currency translation

  • Rounding

  • Validation of standardized financial data

  • Elimination of interunit payables and receivables

  • Elimination of IU profit and loss in transferred inventory

  • Consolidation of investments

  • Reclassifications

  • Allocation

  • Validation of consolidated financial data

1. Characteristic

Consolidation group

D–H

2. Characteristic

Consolidation unit: Company

' ' (space)

3. Characteristic

Version

*

4. Characteristic

Group currency

*

5. Characteristic

*

6. Characteristic

*

7. Characteristic

*
Example 2

This example demonstrates how authorizations you set up for consolidation groups affect the authorizations of that group’s lower-level consolidation groups and units.

The following figure illustrates the initial situation:

Consolidation group CG1 contains consolidation group CG2 and consolidation unit C2000. Consolidation group CG2 contains consolidation unit C1000.

Settings affect the authorizations as follows:

Post. Level

Task

Consol. Group

Consol. Unit

Result

00-10

T1

CG2

' ' (space)

Authorization to execute task T1 for consolidation unit C1000

00-10

T1

CG1

' '

Authorization to execute task T1 for consolidation units C1000 and C2000

00-10

T1

' '

C1000, C2000

Authorization to execute task T1 for consolidation units C1000 and C2000

02,12,22,30

T2

CG2

' '

Authorization to execute task T2 for consolidation group CG2

02,12,22,30

T2

CG1

' '

Authorization to execute task T2 for consolidation groups CG1 and CG2

More Information

Authorizations for Master Data

AS ABAP Authorization Concept