Home TORC: The OneRoleConcept TORC and IdM SAP HCM Security SAP HCM Solutions About KNUZEN Contact Information
KNUZEN   SAP HCM SECURITY
How to control display and maintain access of catalogues. Learning, job, qualification and other catalogues can with benefit be controlled so only relevant parts of the catalogues are displayed for relevant employees.
Access to specific parts of the organizational structure, qualification catalogue or course catalogue.  The access can be granted through function modules, which is reading the users organizational assignment. Based on an employees organizational assignment we can grant this employee access to specific parts of organisational structures, qualification catalogues and training catalogues. This assignment is automatical and requires a minimum of work because it reads the employees organizational assignment from e.g.IT0001 organizational assignmnets. When the employee gets a new record of organizational assignment it will automatical change the access to the structures. What you need is to set up a customer specific table like Z_STRUCTURES_BASED_ON_IT0001  where you can specify entries directly in the production system. The table can be set up as a customising table or master data table. Your decision whether you which to transport the entries from development or you which to maintain them directly in the production system. Example of Z_STRUCTURE table which is being used. Combination possibilities for granting access to a starting point in a structure. The table Z_STRUCTURES_BASED_ON_IT0001 is used by a function module where you a setting up the combination possibilities e.g. [WERKS and BTRTL] or [WERKS AND JOB]  The function module is created through SE37 and then you can assign the function module to a structural profile in transaction OOSP. PROS: The use of selection in PA0001 makes the structural profile less performance heavy but it depends on the evaluation path you in the end add through OOSP. The selection of employees through other criterias than the normal O-S-P eval path makes this solution much more flexible. If you choose to maintain the table in production you will avoid waiting on IT and change request boards. CONS: If you maintain the table directly in production you will not have any test system, which is updated and you must therefore make sure that the table entries in production can be copied and entered in the table in development and testing system for unit and user acceptance testing. You must have clear procedures describing who is having the task for maintaining the table because it will have a global perspective.
1: home
2: knuzen_curriculum_vitae
3: The SAP HCM Authorization concept: The OneRoleConcept
4: RCAT: The RootCauseAnalysisTools related to the OneRoleConcept
5: contact.htm
6: SAP_HCM_OVERVIEW
7: Business Control with OneRoleConcept
8: The Details of the OneRoleConcept
9: SAP_HCM_SECURITY_AND_PERFORMANCE
10: The OneRoleConcept Business benefits
11: SAP HCM transit position in Om as DMZ for transfer activity
12: SAP HR structural authorization for multiple parts of the organisation.
13: LSO and PD Catalogue control
14: Knuzen Substitute/ Deputy solution for line managers
15: Enterprice, personnel and organisational structures in SAP HCM
16: sap_enterprise_structures_revisited
17: Clean up SAP Organisational Management
18: Consistency check of SAP OM and PD tables
19: SAP HCM combined with personnel development functionality
20: Optimize the System Performance with indexing structural authorizations: RHBAUS00
21: Identity management with the use of SAP HCM attributes
22: organizational_key_vdsk1
23: master_derived_composite_sap_roles.htm
24: Standard tools for identifying SAP HCM authorization issues
25: Enhance the layout of PPOME and PPOSE the organisational structure
26: Enhance the existing PD model and use it for personnel development
27: To be structural restricted or not to be... thats the question
28: Automate your SAP solution and avoid errors and business break downs
29: SAP HCM Authorizations and performance
30: design_support_organisations_1.htm
31: design_support_organisation_2.htm
32: design_support_organisation_3.htm
33: Upload Documents on your employees
34: Upload Documents on your employees
35: Upload Documents on your employees
36: The role assignment can be used for compliance check and license control.
37: Upload Documents on your employees
38: Upload Documents on your employees
39: Upload Documents on your employees
40: Upload Documents on your employees
41: Data Model for E-ercruiting and Tips & Tricks
42: Upload Documents on your employees
43: Upload Documents on your employees