## 13.3.5.2.3.2.4  Authorization Objects P\_ORGIN
An authorization object used to check the authorization for accessing HR master data.
## Use
The checks are run when HR infotypes have to be processed or read. In Performance Management, the persons for whom the user is allowed to process appraisal documents must be authorized via authorization object P\_ORGIN. The authorization check is run here using the following fields:
| Authorization Field   | Description                                          |
|-----------------------|------------------------------------------------------|
| INFT                  | Infotype                                             |
| SUBTY                 | Subtype                                              |
| AUTHC                 | Authorization level (such as read, write, matchcode) |
| PERSA                 | Personnel area (from infotype 0001)                  |
| PERSG                 | Employee group (from infotype 0001)                  |
| PERSK                 | Employee subgroup (from infotype 0001)               |
| VDSK1                 | Organizational key (from infotype 0001)              |
## Necessary Settings for Performance Management:
INFTY: Usually, 0000, 0001, 0002 (depending on the organizational area for which the user is responsible)
SUBTY: *
AUTHC: Read and matchcode
PERSA: (depending on the organizational area for which the user is responsible)
PERSG: (depending on the organizational area for which the user is responsible)
PERSK: (depending on the organizational area for which the user is responsible)
VDSK1: (depending on the organizational area for which the user is responsible)
## Note
The authorization object P\_ORGIN provides the user with the necessary authorizations he or she needs to access personnel data. This authorization object is mandatory, that is, you cannot define the use of this authorization object as being optional by activating the structural authorizations in Performance Management (table T77S0, switch HAP00/AUTHO). Rather, the structural authorizations comprise an additional filter for accessing appraisal documents for the permitted set of persons (see Structural Authorizations in Performance Management [page 424]). To assign authorizations for accessing infotypes in the authorization object P\_ORGIN, you do not need to assign specific infotypes in Performance Management. From a technical perspective, it is sufficient in Performance Management if a person is included in the fields PERSA, PERSG, PERSK, VDSK1 in the permitted amount. However, to ensure consistency for the user (for example, in the display of additional personal data in the appraisal document, in the search function for persons with particular infotype values for filling out selection criteria in Performance Management) it is generally beneficial to provide the user with authorizations for the Actions (0000), Organizational Assignment (0001), and Personal Data (0002) infotypes for the persons for whom the user is to process appraisal documents. It should not be necessary that a user is able to process a person's appraisal document but not read this person's organizational assignment. Such a requirement is not logical from the perspective of the process.
For more information on the authorizations, see the SAP Library under ERP Central Component Human Resources Management Personnel Management Personnel Administration Technical Processes in Personnel Administration Authorizations for Human Resources Management .