Structural authorizations are used to restrict access to organizational structures. It controls access to data stored in time dependent structures like Org Structure, Qualification Catalog etc.
Structural authorizations are used to restrict users to access a part of the organizational structure.
Combination of Standard authorization and Structural authorization is used for better Security over HR data. Hence, a user’s overall profile is determined from the intersection of his or her structural or general authorization profiles.
Transaction code OOAC (table T77S0) is used for switching on the Structural authorization main switch. Option AUTSW ORGPD can be set to 1,2,34. Switching it to 0 deactivates it.
Table T77S0 Main Switches:
AUTSW ORGIN (HR: Master Data) – Authorization main switch that controls whether the P_ORGIN authorization object should be used in the authorization check.
- To activate the authorization check – Set the switch to value 1
AUTSW ORGXX (HR: Master Data – Extended Check) – Authorization main switch that controls whether the P_ORGXX authorization object should be used in the authorization check.
- To activate the authorization check – Set the switch to value 1
AUTSW ADAYS (Tolerance Time for Authorization Check) – Authorization main switch that is used to specify the tolerance time of the authorization check in the event of an organizational change.
This Switch to used to set the duration (in terms of days) for which an administrator can access the data outside his or her own authorization in case of an organizational change.
AUTSW PERNR (HR: Master Data – Personnel Number Check) – Authorization main switch that controls whether the P_PERNR authorization object should be used in the authorization check.
- In the standard system, this switch is set to 1. To deactivate the authorization checks on the personnel number assigned to a user, set the switch to 0.
AUTSW APPRO (HR: Test Procedures) – Authorization main switch that controls whether test procedures should be used.
Test procedures can be used if certain entries are to be checked centrally and should not be changeable after the check without further action.
- In the standard system, this switch is set to 0. To activate the test procedures, set the switch to 1.
AUTSW ORGPD (HR: Structural Authorization Check) – Authorization main switch that controls whether the organizational structure should also be included in the authorization check in Personnel administration.