Home TORC: The OneRoleConcept TORC and IdM SAP HCM Security SAP HCM Solutions About KNUZEN Contact Information
KNUZEN   SAP HCM SECURITY
The Organizational Key Attribute  This field can be used for reporting and Authorizations The field is customizable. You decide what dimension the Org Key reflects.
The organizational key grants a huge amount of opportunities for authorizations. The field on Infotype organisational assignment called organisational key is a combination field which you can use for reporting and authorizations. E.g. The personnel area which in many SAP HCM set ups will reflect some kind of functional area. This field is not included in the main authorization objects for SAP HCM so through organisational key you can enhance the authorization check to additional dimensions stored on your employees.  In P_ORGIN and P_ORGINCON we only have the fields personnel area WERKS, Employee group PERSG and Employee subgroup PERSK. So if we want to use the personnel subarea for authorization purposes we can include it in the field organisational key, which is a field represented in P_ORGIN and P_ORGINCON.  We also have the option to add function modules for generating values to organisational key such as identification of hourly versus salaried employees and then it will also have a use for reporting. The benefit of the organisational key in reporting is because it is included as selection field in many standard reports so the work for getting a useable field is rather limited. If you already have an running SAP system where you which to update the organisational key with new logic you will have to migrate the data in the organisational assignment through a copy of the existing infotype record to a new one, which will be affected by the org key you just have implemented. The set up of the organizational key is rather straight forward. Go to the IMG point: Set Up Organisational Key enter Choose the points one by one. The feature returns the variable key which points at the default validation selection. This determines the characterictisc of the organizational key. E.g. are you able to overwrite the systems default values. Will it be validated against the validation table . At the end of this entry you can point at the creation rule. The creation rule decides the return value for VDSK1 organisational key. This is the content of the employees personnel subarea and PA admistrator  and the length in this case is set to be 4 and 3. Please take a look at the table PA0001 and open your eyes for all the opportunities for selection you have. JUPER for instance can be granted by the personnel subarea and then you can reuse this information in VDSK1. Please be aware of the total length of the organisational key must not exceed 14 characters hereafter you will generate a short dump!
1: home
2: knuzen_curriculum_vitae
3: The SAP HCM Authorization concept: The OneRoleConcept
4: RCAT: The RootCauseAnalysisTools related to the OneRoleConcept
5: contact.htm
6: SAP_HCM_OVERVIEW
7: Business Control with OneRoleConcept
8: The Details of the OneRoleConcept
9: SAP_HCM_SECURITY_AND_PERFORMANCE
10: The OneRoleConcept Business benefits
11: SAP HCM transit position in Om as DMZ for transfer activity
12: SAP HR structural authorization for multiple parts of the organisation.
13: LSO and PD Catalogue control
14: Knuzen Substitute/ Deputy solution for line managers
15: Enterprice, personnel and organisational structures in SAP HCM
16: sap_enterprise_structures_revisited
17: Clean up SAP Organisational Management
18: Consistency check of SAP OM and PD tables
19: SAP HCM combined with personnel development functionality
20: Optimize the System Performance with indexing structural authorizations: RHBAUS00
21: Identity management with the use of SAP HCM attributes
22: organizational_key_vdsk1
23: master_derived_composite_sap_roles.htm
24: Standard tools for identifying SAP HCM authorization issues
25: Enhance the layout of PPOME and PPOSE the organisational structure
26: Enhance the existing PD model and use it for personnel development
27: To be structural restricted or not to be... thats the question
28: Automate your SAP solution and avoid errors and business break downs
29: SAP HCM Authorizations and performance
30: design_support_organisations_1.htm
31: design_support_organisation_2.htm
32: design_support_organisation_3.htm
33: Upload Documents on your employees
34: Upload Documents on your employees
35: Upload Documents on your employees
36: The role assignment can be used for compliance check and license control.
37: Upload Documents on your employees
38: Upload Documents on your employees
39: Upload Documents on your employees
40: Upload Documents on your employees
41: Data Model for E-ercruiting and Tips & Tricks
42: Upload Documents on your employees
43: Upload Documents on your employees