How To Fix KH789 - You do not have authorization to display the hierarchy

SAP Error Message - Details

• Message type: E = Error

• Message class: KH - CO-PA Reporting

• Message number: 789

• Message text: You do not have authorization to display the hierarchy

What causes this issue?

This report contains a hierarchy.
You do not have authorization to display the hierarchy.

System Response

The hierarchy was not displayed.

How to fix this error?

If you want to display the hierarchy, you need the following
authorization for the object:
"SAP-EIS Authorizations for hierarchies" (K_KC_HI):
Application class: ,, &V1&
Local field name: ,, &V2&
SAP-EIS: Hierarchy variant:,, &V3&
Activity: ,, 03
A return code "&V4&" was found by the authorization check. For return
code 12, your user master record does not contain authorization for the
authorization object "SAP-EIS Authorization for hierarchies" (K_KC_HI).
Contact your system administrator and ask for this authorization.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message KH789 - You do not have authorization to display the hierarchy ?

  The SAP error message KH789, which states "You do not have authorization to display the hierarchy," typically indicates that the user does not have the necessary permissions to view a specific hierarchy in the SAP system. This can occur in various modules, particularly in controlling (CO) or when dealing with organizational structures.
  Cause:
  
  Authorization Issues: The user lacks the required authorization objects to access the hierarchy. This could be due to missing roles or profiles assigned to the user.
  Hierarchy Settings: The hierarchy itself may have specific settings that restrict access based on user roles or organizational units.
  User Profile: The user profile may not be correctly configured to allow access to the required data.
  
  Solution:
  
  
  Check User Authorizations:
  
  Use transaction code SU53 immediately after encountering the error to see which authorization check failed. This will provide insight into what specific authorization object is missing.
  Review the user's roles and profiles in transaction SU01 (User Maintenance) or PFCG (Role Maintenance) to ensure that the necessary roles are assigned.
  
  
  
  Modify Roles:
  
  If the required authorizations are missing, you may need to modify existing roles or create new ones that include the necessary authorization objects (e.g., S_HIER, S_TCODE).
  Ensure that the roles include access to the specific hierarchy or organizational units that the user needs to view.
  
  
  
  Consult with Security Team:
  
  If you do not have the necessary permissions to change roles or authorizations, contact your SAP security team or administrator. They can help identify and resolve authorization issues.
  
  
  
  Testing:
  
  After making changes to roles or authorizations, have the user log out and log back in to test if the issue is resolved.
  
  
  
  Related Information:
  
  Authorization Objects: Familiarize yourself with the relevant authorization objects that control access to hierarchies in SAP. Common objects include:
  
  S_HIER: Hierarchy authorization
  S_TCODE: Transaction code authorization
  
  
  Documentation: Refer to SAP documentation or your organization's internal guidelines for managing user roles and authorizations.
  Transaction Codes:
  
  SU53: Display authorization check
  SU01: User maintenance
  PFCG: Role maintenance
  
  
  
  By following these steps, you should be able to identify and resolve the authorization issue related to the KH789 error message.