Quantcast
Channel: SCN: Message List - SAP NetWeaver Administrator
Viewing all articles
Browse latest Browse all 8487

Re: HR Security Role -- Concerns

$
0
0

Hi Pradeep,

 

If you open Infotype 0001 for any employee record, you will see a field "Administrator Group" alternatively called "Administrator Area". This allows you to group employee records based on HR Master Data, Time and Payroll.

 

The advantage of having the above is to allow set of users access to a group of employee record. Hence this particular filed is used in Authorization check while accessing HR Master records.

 

But the question is How does this authorization check happens? And the answer is fields like SACHP, SACHZ in P_ORGIN/INCON, P_ORGXX/XXCON.

 

So to answer your question,

Let's say two roles R1 and R2 have SACHP values 001 and 002 respectively.

 

When R1 is assigned to User U1, then the user will only have HR Admin rights to employee records which have Administrator Group = 001 maintained in IT0001.

Similarly for R2.

 

This helps in categorization and distribution of responsibility within HR Admin team. Let me know if this helps.

 

Thanks,

 

Deb


Viewing all articles
Browse latest Browse all 8487

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>