Question:
Can someone that knows HR tell me why if a user has PA61 and PA70 it would be an segregation of duties issue, and how does PA70 allow payroll processing?
Any help is appreciated.
_________________
Tglo
Answer:
In HR, you should not base SOD's on transactions. It is not like FI in this sense. HR SOD's should be based upon the underlying authorization values. Foe example: You cannot enter time (E AUTH in P_ORGIN) and approve time (D in AUTH in P_ORGIN).
Answer:
Thank you very much Mgilmore. If a person has a * for P_Orgin is there a built-in control in SAP that prevents them from entering and approving their own time? Where might I find reliable security information on the HR module?.
_________________
Tglo
Answer:
Hi,
There`s an object call P_PERNR to avoid an employee to change their own master data. Look at the SAP documentation for this. Make sure that in table t77s0 that the object pernr is on
Answer:
Yes, The online documentation for P_PERNR is useful.Also, SAP's course book for HR940 exlains P_PERNR in depth.