Info type 0008 will
enable users to look at others basic pay which is confidential and it required
to be protected from users, because we must restrict this access to users who
ever have access to HR data.
Here I will tell you
how to achieve it.
1. Go to SE16N and check
the table TOBJ(Authorization Objects) and enter field value INFTY ad execute
2. Now you can able to see
all the authorization objects which is having filed INFTY, so now we need to
check which all are tcodes having access to list of authorization objects which
is having access to field INFTY
3. Go to table TSTCA in
SE16N tcode and enter the list of authorization objects
4. Now execute and you
will get a list of tcodes which is having authorization field INFTY, just do a
excel work to remove all the duplicate values and you will get list of PA20,
PA30, PA40, etc.. HR tcodes
5. That’s it you are
almost done and now check who is having access/whom you want to disable access
to info type 0008 in HR data by pulling report in SUIM and making changes in
the corresponding assigned roles to users.
Hope this document is
helpful to you and do share J
No comments:
Post a Comment
Note: only a member of this blog may post a comment.