Administration > Setup > General > User administration > Rights management - robinfeng/beashelp GitHub Wiki
User administration alternative DI-API-connection Extended: EMail Setup, User beas user Rights management beas has its own rights management, which needs to be set up parallel to SAP Business One
Note For many functions beas uses the DI-API of SAP Business One. Therefore, beas requires various SAP Business One - rights. See Required SAP-Rights, alternative DI-API-Connection
Following possibilities:
no function blocked read Reading rights, no changes full full authorization, change, delete, create new entries
Authorizations Authorization ID Meaning Operation catalog AGEDIT Authorization for window: Administration - Definition - Production - operation catalog Operation types AGTYPEDIT Administration - Definition - Production - Operation types Administrate operation types, assign them to operations Resources AGEDIT Production - Resources See Edit resources Administrate resources assign them to operations Administrate resource cost rates See cost rates Resources shift schedule FSCHICHTPLAN Administrate shift schedule Edit items ARTEDIT hmtoggle_plus1 Administrate item master data and warehouse rules (only beas-item master) Authorization for Edit item master and price lists Note: for item view, the beas authorization "edit items" is enough, To save items, the SAP Business One authorization is required additionally.
Edit warehouse rules. See Warehouse rules Item BOM
Administrate BOMs. This setting can be subdivided. see extended tab hmtoggle_plus1 Note Setting does not affect pre-calculation and own created Crystal reports. Diverse functions will be blocked, for example change of item group and material group. But it is still possible to change the group via SAP Business One item screen and to get access this way. That why it is recommended to limit the user´s authorization. Item routing
Manage routings. see Extended tab and further notes on "Item BOM" Item quality control
Item: assignment to QC-inspection plan to be used. See Item master - Quality controlbeas9.0-000-003-004 Customers GPEDIT Customer administration (view only, only beas standalone) Cost centers KSTEDIT Manage cost centers, assign to resources or personnel Material group MAEDIT Manage material groups, select via item master Unit of measurement MEEDIT Manage units of measurement, select via item master Cut-off VERSCHN Manage scrap/cut-off tables, select via item master Manufacturer HEDIT Manage manufacturers, select via item master Tool WKSEDIT Manage tools, assign to operations Cost types TIMETYPE Manage cost types, assign to resources and operations Production FAEDIT Access on work orders Production BOM FASTL Is the BOM displayed? (window and list) Only view is affected. Prints and reports as "Material requirement" are not affected. Extended rights settings are considered. See Extended tab Production routing FAAPL Are routings displayed? Only view is affected.Prints and reports as "Material requirement" are not affected. Extended rights settings are considered. See Extended tab Production closed release/post FAABG It the user allowed to re-open a closed work order ? Or in case of continuous stocktaking, is it allowed to post on a closed work order? Production request MRPWORKORDER Access on production request created in MRP, from which work orders can be created External operation purchase FRBEST Create purchases for external operations External operation provision FRBEIST Transfer provision parts for external operation to the supplier warehouse External operation goods receipt FRWRG Post in components from external operation External operation issue FRAUSB issue provision parts from supplier´s warehouse Project PRJ Manage projects Project Basis data PRJBASIS Set up project basis data (tasks) Project Template PRJTEMPLATE Set up project templates (structures) Project Catalog PRJCATALOG Set up tasks catalog Post-calculation FNAKA Access on post-calculation for work orders hmtoggle_plus1 affected:
- post-calculation via menu
- work order item - Button post-calculation
- post calculation view
- production - calculation tab MRP wizard FBESTV Access the MRP wizard Create Purchase request MRPPURCHASE User can create a purchase request manually and change it. all other features are blocked. No access on other purchase request created by other employees. Manage purchase requests MRPPURCHASE2 Access on all functions in Purchase requests list. Access on all entries of all employees. (beas9.0-004-032) Confirm (Time receipt) FARUECK Create time receipts to confirm order times Administrate time receipts FAVERWALTEN Administrate existing time receipts Confirm (time receipts) view FAANSICHT View existing time receipts Priorities FPRIOR Set up priorities for production Calculation types FCTYP Capacity planning: set up calculation types in APS Interruption reasons FSTILLSTAND Administrate interruption reasons, select at time receipt Scrap reasons FAUSSCHUSS Administrate scrap reasons, select at time receipt Mile stones FMILESTONE Manage mile stones, select in operations Production pool FPOOL Access the pool list to distribute operation sequences to production pools Production list FLISTE Use production lists Production server FSERVER (only customization) Journal postings JOURNAL View journal entries for financial accounting in production (see work order structure - orange barrel APS View APS View scheduling in APS APS scheduling APSP Administrate scheduling in APS ( rough and detailed planning) Pre-calculation VORKALK Access the pre-calculation Calculation objects KALKOBJ Manage calculation objects for calculation schemas Batch-Pre-calculation BATCHKALK Access the batch-calculation Run batch pre-calculation BATCHKALKSTART Full right required to start a batch calculation. Additionally, at least reading rights are required for the batch calculation itself (option above). Ab beas9.0-000-000-001 Stock revaluation PRICEREV Access in batch-calculation - result - stock revaluation. See Batch-calculation stock revaluation Ab beas9.0-000-001-001 Batch post-calculation BATCHNKALK Use the batch-post-calculation Ab beas9.0-000-001-001 QC order QS-A Edit QC orders register measurements. In Terminal mode this authorization is activated automatically. QC orders archive QS-R Access closed QC orders QC inspection plan QS-PLAN Access inspection plans, assign to items or operations QC edit defaults QS-TEXTE Manage default texts See QC defaults Edit QC order QS-AE Change existing QC orders See edit measurement position MM purchase order post in MWEINGANG Post in single purchase items MM manual transfer MWBUCHEN Post in / issue / transfer as single operation MM warehouse management BINRIGHT Set up warehouse master data MM booking bin locations BINBOOKING Access bin location management MW Journal MWJOURNAL Access stock movements report and posting documents via work order structure See work order structure - postings warehouse management - inventory history - journal Ab beas9.0-000-001-001 MM batch reports MWCHARGE Access batch reports MM batches transfer MWBTTRANSFER Transfer item batches to other items WO backflushing booking MWRETROGRAD issue material automatically for a work order See Backflushing MM complaint RECLAMATION Access complaints MM Inventory MWINVENTUR Access inventory function (create and edit stocktaking) MW Reservation list MWRESERVATION Display and manage reserved material MM Mobile input POCKET Only for old Mobile-System (don't use) Terminal TERMINAL Access Terminal for factory data capture Personnel PEDIT hmtoggle_plus1 Access on personnel master data Note: "extended editing rights" are considered only if the user has at least reading rights for personnel master. Full access on personnel master has a higher priority than extended editing rights. See Personnel master data extended editing rights Personnel editing rights PACCESS hmtoggle_plus1 Access personnel master data Extended personnel authorization. Defines on user level, which program area may be viewed or edited. Note: "extended user rights" are taken into account only, if the user has at least reading rights for personnel master. Full access on personnel master has a higher priority than the extended editing rights. See Personnel master data extended editing rights
ab beas9.0-000-003-000 Currently present PANW View list of currently present employees Time evaluation PZAUSW Create time evaluations See Time evaluation Factory calendar PKAL Manage factory calendar, basis for shift schedule and resources FDC master data ANW Manage shifts, day templates, absence types Benzing Administration benzing Only for old Kaba Benzing - System with BCOMM-Software Benzing Protocol benzinglog Only for old Kaba Benzing - System with BCOMM-Software Bonus PRAEMIE Manage bonus models Business performance BAB Access Business performance Product configurator CAFT Access product configurator User functions EFUNK Old function, visible only for compatibility reasons Change company FAWECHSEL Access the "change company" function Options SOPTION Several , for example configuration wizard User administration BENUTZER Manage users Report settings REPORTE Access on report settings Reporte administrate REPORTINSERT Manage reports Language SPRACHE Manage languages WEB-APPS WEBAPPS Manage WEB apps WEB Berechtigung WEB-ACCESS Manage WEB app authorizations SQL-instructions SQL Execute SQL-statements directly Template, window settings TEMPLATE Template-administration, Window settings and Edit objects (Ctrl+Double click) Database test DBTEST Run database test System SYSTEM Diverse system functions. Debug SYSDEBUG Debug-window. Note: beas-script is available. Everything can be executed. Generate Item SYSARTGEN Access the function item generation Customized extensions CUSTFEDIT Manage customer specific extensions System programming SYSFEDIT Manage system specific extensions
hmtoggle_plus1 Extended tab
hmtoggle_plus1 Known issues in authorization control beas requires special user rights to work properly with the functions of SAP Business One. See Required SAP Business One Rights
Terminal application In the Terminal application, beas logs on in the background using a central DI-API user, which is set up in Configuration Wizard - System - DI API. This user needs special rights. See Required SAP Business One Rights The user who logs on to the terminal, does not notice. He has only a personal set of functions available. In case, documents are generated, the personnel number is entered in [document-line table] u_beas_pers_id. That way it is logged, which user created the document.
WEBAPP WEBAPP work the same way as the terminal.
Start beas without SAP Business One beas can be started without SAP Business One. Then only selected functions are available in beas. use this, if the user does not need SAP Business One functions.
see also User administration