Hi Team, This is the Question regarding HR security.

I have created one role for HR Admin and one structural profile for the same,and assigned both to one HR Admin (test user- which is hired in PA40 and maintained IT 0105,Subtype 0001).

Purpose of role and Strutural profile : HR Admin should be able to edit,display,change IT 0001,0002,0006,0008 for all emps in the organization which are mentioned in strutural profile( i have mentioned 3 Org Units in the structural profile, for each org unit one position is there and each position occupied by one person.)

So totally this HR Admin should be able to modify the data for only 3 emps.But in this case HR Admin cna bale to modify one more emp data who is not comes under any orgunit which is mentioned in the structural profile.

And In the role i have given below values.

P_ORGIN

Authorization level :E,R,S,W

Infotype :0001,0002,0006

Personnel Area : US01

Employee Group :1

Employee Subgroup :U4

Subtype :*

Organizational Key :CA04-CA05,US01

P_PERNR

auth1 :

Authorization level            R, W

Infotype                       0002, 0006

Interpretation of assigned per I

Subtype                        *

auth2 :

Authorization level            E, S, W

Infotype                       0001, 0008

Interpretation of assigned per E

Subtype                        *

auth3:

Authorization level            M, R

Infotype                       0008

Interpretation of assigned per : I

Subtype                        *

My Ques is GR Admin user is able to modify other emp data whos orgunit is not comes under any org unit which is mentioned in Strutural profile , which is assigned to HR Admin.

And i observed one thing here, the extra emp personal area, sub area,emp grp,sub grp,org key is covered in the above access but in the strutural profile the org unit is not there.

Please suggest how HR Admin can able to modify HR master data of that employee.

Regards,

Venu.