Tip and Tricks SAP HR Security

Report  RHUSERRELATIONS

• This report enables you to evaluate all the HR authorization profiles that exist for a user. This includes the structural authorization profiles as well as the HR Basis authorization profiles that are assigned to the user directly (using role maintenance) or indirectly (in Organizational Management).
• In this report you can access several functions that enable selective evaluation of the authorization profiles. You can display the following information:
  -     The entire list of authorization main switches with the set values (on the selection screen using the function bar)
   -    All persons assigned to the user in the Communication infotype  (0105) (on the selection screen using the function bar)
  -     The organizational units to which the user is related
  -     The structural authorization profiles
  -     The user's role assignments and standard profiles
  -     Authorizations based on HR authorization objects (from Personnel  Administration/ Personnel Planning - here you can make a multiple selection)

Employee should be able to change their own address data (infotype 0006) using employee self   service.

1. Prerequisites: The AUTSW PERNR main switch must be activated for the authorization check by personnel number to take place.
2. The user assignment for all employees who use the SAP Employee Self-Service must be maintained in infotype 0105.
3. Users who are not administrators should not be granted P_ORGIN authorizations.
4. Each user accessing the SAP Employee Self-Service is granted the authorizations shown in the graphic for the P_PERNR authorization object. The first authorization grants the employee read access to all infotypes stored under his or her own personnel number. The second authorization grants write authorization for all data records of the 0006 infotype of the employee's own personnel number.

No maintenance of own data by Administrator

Prerequisites:
The AUTSW PERNR main switch must be activated for the authorization check by personnel number to take place.

• The user assignment for the corresponding administrator must be maintained in infotype 0105.
• Each employee affected is granted the P_PERNR authorization shown in the graphic.