Object Access Control

This document explains what object access control is. It also lists the different programs in Sales and Distribution where this functionality can be implemented.

Before you start


Object access control is a security feature for functions in M3.

You can use object access control to ensure that only authorized personnel have access to certain records.

When a user tries to access a record that is connected to an object access group, the system checks to see whether the user belongs to a user group that is connected to the relevant object access group. If so, the user is granted access. If not, a message appears on the screen telling the user that he/she has been denied access.

Example: Using object access control

You have created an object access group called Prices for price maintenance.

You have also created a user group called Pricemaint for personnel who are responsible for pricing. All qualified users must be connected to this user group.

To make object access control work, the object access group and the user group need to be connected to each other.

A price list has to be connected to the object access group Prices in the function 'Sales Price List. Open' (OIS017/E).

If a user who is not connected to the user group Pricemaint tries to open that particular price list after it has been connected to the object access group Prices, he/she will be denied access.

These functions can be connected to an object access group:


A user group and an object access group have been created. These two groups are subsequently connected to each other in order to obtain object access control.

Object access control can be used when a company, for security reasons, wants only a limited number of employees to have access to records in various programs such as price lists.

Related topics