Hi Team, This is the Question regarding HR security. I have created one role for HR Admin and one strcural profile for the same,and assigned both to one HR Admin (test user- which is hired in PA40 and maintained IT 0105,Subtype 0001). Purspose of role and Strutural profile : HR Admin should be able to edit,disply,change IT 0001,0002,0006,0008 for all emps in the orgnaization which are mentioned in strutural profile( i have mentioned 3 Org Units in the structural profile, for each org unit one position is there and each position occupied by one person.) So totally this HR Admin should be able to modify the data for only 3 emps.But in this case HR Admin cna bale to modify one more emp data who is not comes under any orgunit which is mentioned in the structural profile. And In the role i have given below values. P_ORGIN Authorization level :E,R,S,w Infotype :0001,0002,0006 Personnel Area : US01 Employee Group :1 Employee Subgroup :U4 Subtype :* Organizational Key :CA04-CA05,US01 P_PERNR auth1 : Authorization level R, W Infotype 0002, 0006 Interpretation of assigned per I Subtype * auth2 : Authorization level E, S, W Infotype 0001, 0008 Interpretation of assigned per E Subtype * auth3: Authorization level M, R Infotype 0008 Interpretation of assigned per I Subtype * My Ques is GR Admin user is able to modify other emp data whos orgunit is not comes under any org unit which is mentioned in Strutural profile , which is assigned to HR Admin. And i obseved one thing here, the extra emp personal area, sub area,emp grp,sub grp,org key is covered in the above access but in the strutural profile the org unit is not there. Please suggest how HR Admin can able to modify HR master data of that emloyee. I have created one role for HR Admin and one structural profile for the same,and assigned both to one HR Admin (test user- which is hired in PA40 and maintained IT 0105,Subtype 0001). Purpose of role and Strutural profile : HR Admin should be able to edit,display,change IT 0001,0002,0006,0008 for all emps in the organization which are mentioned in strutural profile( i have mentioned 3 Org Units in the structural profile, for each org unit one position is there and each position occupied by one person.) So totally this HR Admin should be able to modify the data for only 3 emps.But in this case HR Admin cna bale to modify one more emp data who is not comes under any orgunit which is mentioned in the structural profile. And In the role i have given below values. P_ORGIN Authorization level :E,R,S,W Infotype :0001,0002,0006 Personnel Area : US01 Employee Group :1 Employee Subgroup :U4 Subtype :* Organizational Key :CA04-CA05,US01 P_PERNR auth1 : Authorization level R, W Infotype 0002, 0006 Interpretation of assigned per I Subtype * auth2 : Authorization level E, S, W Infotype 0001, 0008 Interpretation of assigned per E Subtype * auth3: Authorization level M, R Infotype 0008 Interpretation of assigned per : I Subtype * My Ques is GR Admin user is able to modify other emp data whos orgunit is not comes under any org unit which is mentioned in Strutural profile , which is assigned to HR Admin. And i observed one thing here, the extra emp personal area, sub area,emp grp,sub grp,org key is covered in the above access but in the strutural profile the org unit is not there. Please suggest how HR Admin can able to modify HR master data of that employee.
Posted on: Wed, 21 Jan 2015 07:41:19 +0000
Recently Viewed Topics
© 2015