Example: Administrator Should Not Be Allowed to Enter Data Alone - SAP Documentation

Example: Administrator Should Not Be Allowed to Enter Data Alone

Requirement

You want to ensure that the Additional Payments infotype (0015) can only be edited by two administrators together. To achieve this, you want to set up the asymmetrical double verification principle where one of the administrators is responsible for recording the data and the other administrator for controlling the process. For the sake of simplicity, assume that only the AUTSW ORGIN main switch is activated.

Realization

The time administrator requires the following authorization for the P_ORGIN authorization object:

INFTY = 0015

SUBTY = *

AUTHC = R, M, E

PERSA = *

PERSG = *

PERSK = *

VDSK1 = *

The time administrator requires the following authorization for the P_ORGIN authorization object:

INFTY = 0015

SUBTY = *

AUTHC = R, M, D

PERSA = *

PERSG = *

PERSK = *

VDSK1 = *