Introduction

Learn how to conceal fields in the SAP GUI’s KREDX (Vendors by Address Attributes) Search Help in this blog post.

Users having the given role will be able to view the field value due to the use of a PFCG Role for the authorization check. Data will be safeguarded by masking, clearing, or disabling the field if a user does not have this role, indicating that they are not permitted.

Unauthorized users will see the following outcome:

Prerequisite
“Protecting sensitive data on SAP GUI screens at the field level is possible with the help of “Field Masking for SAP GUI.” Field Masking for SAP GUI is a product that is supplied to the customer as an add-on (UIM 100). Role-based masking can be achieved by installing Add-on UIM 100 in the client system.

Requirement
Role-based masking is required for “KREDX (Vendors by Address Attributes)” Search Help. Some of the fields need to be masked on this Search Help.

Recording Tool for Technical Address
Technical Information (Table Name-Field Name), which users can obtain by pressing “F1” on the field, is necessary in order to conceal the fields on the SAP GUI. In some cases, “F1” does not function properly for some or all of the fields in the SAP GUI’s Search Helps. In our case, none of the fields on KREDX (Vendors by Address Attributes) Search Help can be found under “Technical Information (Table Name-Field Name)”.

The “Recording Tool for Technical Address” in this scenario will assist the user in locating the technical address for UI Masking. The User Trace, Table Name-Field Name, Field Value, and other metadata information are logged or recorded in this report to assist users in locating the Technical Address for masking.

Even after running the Recording Tool, if you do not see the Table Name-Field Name information of the field that you want to mask in the report then it is not possible to mask that field technically because of technical limitation.

How do I utilise the technical address recording tool?
The user must first be enabled for recording before running the actual transaction that calls for masking. Following the transaction’s successful completion, the user can view the table name, field name, and other metadata.

  • Execute T-Code “/N/UIM/RECORDING_TOOL”. “Recording Tool for Technical Address”screen will be displayed.

 

  • Enable Recording – Click on “Enable” button in order to activate recording at Global Level.

  • Activate User – Click on “Activate User” button in order to activate recording for the user. Provide the “User Name”, “Timeout Period in minutes” and check “Value to be stored?” check-box and click on “OK” button.
    • User: User for which store the technical address for UI fields entries.
    • Timeout (in Mins): User activation timeout period in minutes.
    • Value to be stored: Need to store the value or not.

  • Recording will get activated for the user and “Active” flag will change to “YES”.

  • Execute TCode “SE11“
  • Select option “Search Help“
  • Enter value as “KREDX” and click on “Display” button

  • Click on “Test…” button

  • Click on “Test” button

  • Enter “*” in “Name” field and click on “Copy” button

 

  • KREDX (Vendors by Address Attributes) Search Help details will be displayed.

 

  • View Recording Data – Select the user for which you want to view the Recording Data and click on “View” button on View Recording screen.

  • Provide the Selection Parameters in order to view the Recording Data and click on “Execute” button.

  • Based on the selection parameters, the system displays a list of entries which contains Table Name-Field Name information using which user can configure masking on the fields.

  • Delete Recording Data – Since this Recording Tool stores data in a temporary table, you can choose to delete the entries for a user by clicking on the “Delete” button. Note: Records older than 7 days are automatically deleted.

  • Deactivate User – Click on “Deactivate User” button in case you want to deactivate the recording for the selected user.

 

Maintain Masking configuration
Configure Technical Information (Table Name-Field Name) of field in masking configuration.

Follow the given path and maintain following entries:
SPRO -> SAP NetWeaver -> Field Masking for SAP GUI -> Masking Configuration->Maintain Masking Configuration

Conclusion
In this blog post, we learned how to conceal fields in SAP GUI’s KREDX (Vendors by Address Attributes) Search Help using a role-based approach.