Exceptions to attributes for business partners permissions
Some attributes such as Business Partner Type, Area and Line of Business can be defined for multiple roles. However, these attributes can include a different value for each role for the same business partner (primary object). The business partner is provided authorization if:
- The business partner authorization is set up for an attribute (such as Area) and the authorized value is available in one of the roles, the business partner is authorized.
- Permission is set up for a different value of the same attribute and another role of the same business partner has that value for which the business partner is authorized.
Example
A Business partner ABC has two defined set of roles. One is set as the buy-from role which is the ‘Preferred Supplier’ type and for the ship-from role, the ‘Supplier’ type.
- If an employee is authorized to use all the business partners of the type ‘Preferred Supplier’, the employee is allowed to use business partner ABC.
- If the employee is authorized to use all the business partners of the type ‘Preferred Supplier’, but is not authorized for the type ‘Suppliers’, the employee is not allowed to use business partner ABC.
Enterprise Unit
Employees who are authorized for the enterprise unit attribute of any authorization entity, can be defined as a controller, auditor, and a high level manager. The selected employee can analyze the data and is able to view business partners in the authorized departments.
If business partners are authorized based on enterprise unit, LN authorizes all the business partners with the enterprise unit(s) of all the departments setup specified in this data for the business partner:
- sales office
- purchase office
- accounting office(s)