Re: Add BTRTL to Authorization Object P_ORGIN

Hi Marcin,

you can't add fields to P_ORGIN other than by modification, so the usual way to go is indeed populating VDSK1 with BTRTL or a combination with other fields like WERKS.

It's a very simple piece of configuration explained in the IMG. You find it under the IMG branch where infotype 0001 is configured. 

If you build your authorisations on this field, make sure you configure it so it can't be overwritten.

There is one other way:

Use auth object P_NNNNN instead. You can define the field you need, generate it, add it to roles, and then activate the check in T77S0.

It's mentioned in this presentation, which also has a step by step guide in the appendix:

http://www.slideshare.net/sringling/sap-hcm-authorisations-streamline-processes-and-improve-hr-data-security

But VDSK1 is the simpler solution by far, unless you need that field for a different purpose.