SlideShare a Scribd company logo
1 of 13
Authorization Concept
        The authorizations for users are created using roles and profiles. The administrator
creates the roles, and the system supports him or her in creating the associated authorizations.




                                                                       Authorization
       B Object Class             Authorization Object                       A
                                                                   Create, Change,Display
                                      User Master                          SUPER
                                    Maintenance: User
                                         Groups                               B
          Basis Admin                   Activity                           Display
                                      User Group                           Finance



                                 Fig 1.1 Authorization Concepts

          Authorization objects allow complex checks that involve multiple conditions that allow
a user to perform an action. An authorization is always associated with exactly one authorization
object and contains the value for the fields for the authorization objects.

          An authorization is a permission to perform a certain action in the SAP System. The
action is defined on the basis of the values for the individual fields of an authorization object.
When a user logs on to a client of an SAP system, his or her authorizations are loaded in the user
context. The user context is in the user buffer( in the main memory) of the application Server.

         When the user calls a transaction, the system checks whether the use has an
authorization in the user context that allows him/her to call the selected transaction.
Authorization checks use the authorizations in the user context.

All the authorizations are permissions. There are no authorizations for prohibiting. Everything
that is not explicitly allowed is forbidden.

The user gets the necessary authorization through Roles. The role also contains the
authorizations users need to access the transactions, reports, web-based applications and so on,
contained in the menu.

The details of user administration is specified in my other BOK “User Administration in SAP
R3 System”.

How to Create a new Role
There are 2 ways, for creation of new roles

   •    Copy an existing role (SAP pre-defined role).
   •    Creating a new role, based up on the business requirements.

Copy an existing role

You can use the user role examples just as they are delivered with the SAP System.

Prerequisites

Check the suitability of the roles delivered by SAP before you create your own roles. If you want
to modify them, all you need to do is copy the SAP template (Roles provided by SAP). And
modify that newly created one.

Procedure

The copying a existing role is described below.


Using this icon (Copy Role).        .

To create a single role:

   1. Choose the pushbutton Create role or the transaction PFCG in the initial transaction SAP
        Easy Access. You go to the role maintenance.
   2. Choose the pushbutton Copy role.
   3. Now select the appropriate role, delivered by SAP in the source role and specify the user
        defined role as the target role
   4. Now choose the pushbutton “copy all/ copy selectively.”
   5. Now new role has been created successfully. Now we can edit the new role by pressing
        the pushbutton “change role”.
   6.   And based on the requirements deselect/remove unnecessary authorizations from that
        SAP.
7. Now we can assign this new role to the user.

This reduces the risk of giving all the authorizations to a user.
For example, consider a business scenario where we want to create a role for a particular user,
who works in sales department.

Creating a new role

Based up on the business requirements we have to create roles, which are not provided by SAP.

Here in the above scenario, we have to assign only that particular role with which he will be
able to create, change and view the Sales Order.

Procedure

The creation of a single role is described below.

To create a single role:

   1. Choose the pushbutton Create role or the transaction PFCG in the initial transaction SAP
      Easy Access. You go to the role maintenance.
2. Specify a name for the role.

       The roles delivered by SAP have the prefix 'SAP_'. Do not use the SAP namespace for
       your user roles.

   3. To distinguish between the names of User defined roles and SAP predefined roles, we
      will prefix the role with ‘Z_’ or ‘Y_’.




   4. Choose Create Role.

   5. Enter a meaningful role description text. You can describe the activities in the role in
      detail. And save the role.

You may use an existing role as a reference.
Assign transactions, programs and/or web addresses to the role in the Menu tab.
6. The user menu which you create here is called automatically when the user to whom this
   role is assigned logs on to the SAP System.
7. You can create the authorizations for the transactions in the role menu structure in the
      authorizations tab.




To get the profile name for this particular role, press the pushbutton “propose profile names”.
SAP will supply with a profile name.

And press the pushbutton ‘Change Authorization Data’ for maintaining authorization data and
generating profiles.




  Profile generator
Specify the company code, division, sales organization distribution channel etc, press Save
button.

If we don’t specify any organization code, we will see the red color dot against each
Authorization Object. To avoid this, its better to specify the company code and the rest.




                                                                 Authorization object



                                                                                        Activity



                                                                               User group



                                                                    Tasks



For each role, there will be some Authorization objects, User group, Activity and Tasks, which I
had specified in fig 1.1.

However, all the authorization values must be manually checked and adjusted if required in
accordance with the actual requirements and authorities.




                                                                   Profile generator
Once we see all the authorization object are green, then we can generate the profile for this
particular role by pressing that ‘generate’ pushbutton .

With this we have successfully created a role.

Advanced Concepts

If you want to call the transactions in a role in another system, enter the RFC destination of the
other system in the Target system field.




You should only use RFC destinations which were created using the Trusted System concept to
guarantee that the same user is used in the target system. This is only necessary if you want to
navigate via the Easy Access Menu in the SAPgui.

If you use the Workplace Web Browser, you can use any destination containing a logical system
with the same name.

If the Target system field is empty, the transactions are called in the system in which the user is
logged on.

You can also specify a variable which refers to an RFC destination. Variables are assigned to the
RFC destinations in the transaction SM30_SSM_RFC.

To distribute the role into a particular target system, specify the target system (its Release must
be 4.6C) and choose Distribute. This function is most useful when you use the Workplace.
You can create the user menu:

   o   from the SAP menu

       You can copy complete menu branches from the SAP menu by clicking on the
       cross in front of it in the user menu. Expand the menu branch if you want to put
       lower-level nodes or individual transactions/programs in the user menu.

   o   from a role

       this function copies a defined role menu structure in the same system into the
       current role. You can also copy the menu structure of a role delivered by SAP.
       Click on the menu branches and copy them.

   o   from an area menu

       You can copy area menus (SAP Standard and your own) into a role menu. Choose
       an area menu from the list of menus and copy the transactions you want.




   o   Import from file

   o   Transaction

       You can put a transaction code in the user menu directly.
o   Program

               This function puts programs, transaction variants or queries in the user menu.
               They need not be given a transaction code.

               ABAP Report

               Choose a report and a variant. You can skip the selection screen.




           o   Others

               By choosing the other button, you can add Internet Address or Links or Files.
               When integrating files, you must use the storage paths instead of URLs. You can
               also specify BW Web Reports, and links to external mail systems and Knowledge
               Warehouse.

   7. Save your entries.

Result

You have created a role. Role maintenance automatically creates the authorizations that are
associated with the transactions specified in the menu tree. However, all the authorization values
must be manually checked and adjusted if required in accordance with the actual
requirements and authorities.

More Related Content

What's hot

SAP Security & GRC Framework
SAP Security & GRC FrameworkSAP Security & GRC Framework
SAP Security & GRC FrameworkHarish Sharma
 
SU01 - Background and Instruction
SU01  - Background and InstructionSU01  - Background and Instruction
SU01 - Background and InstructionMart Leepin
 
sap security interview_questions
sap security interview_questionssap security interview_questions
sap security interview_questionssumitmsn2
 
Introduction on sap security
Introduction on sap securityIntroduction on sap security
Introduction on sap securityyektek
 
Sap Security Workshop
Sap Security WorkshopSap Security Workshop
Sap Security Workshoplarrymcc
 
Authorisations in SAP: best practices
Authorisations in SAP: best practicesAuthorisations in SAP: best practices
Authorisations in SAP: best practicesJonathan Eemans
 
Grc 10 training
Grc 10 trainingGrc 10 training
Grc 10 trainingsuresh
 
Business Partner S4HANA.pdf
Business Partner S4HANA.pdfBusiness Partner S4HANA.pdf
Business Partner S4HANA.pdferikotsuji
 
Implementing SAP security in 5 steps
Implementing SAP security in 5 stepsImplementing SAP security in 5 steps
Implementing SAP security in 5 stepsERPScan
 
081712 isaca-atl-auditing sap-grc
081712 isaca-atl-auditing sap-grc081712 isaca-atl-auditing sap-grc
081712 isaca-atl-auditing sap-grchkodali
 
Workbench and customising request
Workbench and customising requestWorkbench and customising request
Workbench and customising requestlakshmi rajkumar
 
Fiori and S/4 authorizations: What are the biggest challenges, and where do t...
Fiori and S/4 authorizations: What are the biggest challenges, and where do t...Fiori and S/4 authorizations: What are the biggest challenges, and where do t...
Fiori and S/4 authorizations: What are the biggest challenges, and where do t...akquinet enterprise solutions GmbH
 
SAP HANA SPS08 Security
SAP HANA SPS08 SecuritySAP HANA SPS08 Security
SAP HANA SPS08 Security SAP Technology
 
T codes sap-basis-training
T codes sap-basis-trainingT codes sap-basis-training
T codes sap-basis-trainingmunnasap007
 
Anil kumar sap security & GRC
Anil kumar sap security & GRCAnil kumar sap security & GRC
Anil kumar sap security & GRCAnil Kumar
 
Sap User Exit for Functional Consultant
Sap User Exit for Functional ConsultantSap User Exit for Functional Consultant
Sap User Exit for Functional ConsultantAnkit Sharma
 

What's hot (20)

SAP Security & GRC Framework
SAP Security & GRC FrameworkSAP Security & GRC Framework
SAP Security & GRC Framework
 
SU01 - Background and Instruction
SU01  - Background and InstructionSU01  - Background and Instruction
SU01 - Background and Instruction
 
sap security interview_questions
sap security interview_questionssap security interview_questions
sap security interview_questions
 
How to perform critical authorizations and so d checks in sap systems
How to perform critical authorizations and so d checks in sap systemsHow to perform critical authorizations and so d checks in sap systems
How to perform critical authorizations and so d checks in sap systems
 
Introduction on sap security
Introduction on sap securityIntroduction on sap security
Introduction on sap security
 
SAP Security interview questions
SAP Security interview questionsSAP Security interview questions
SAP Security interview questions
 
Sap Security Workshop
Sap Security WorkshopSap Security Workshop
Sap Security Workshop
 
Authorisations in SAP: best practices
Authorisations in SAP: best practicesAuthorisations in SAP: best practices
Authorisations in SAP: best practices
 
Grc 10 training
Grc 10 trainingGrc 10 training
Grc 10 training
 
Business Partner S4HANA.pdf
Business Partner S4HANA.pdfBusiness Partner S4HANA.pdf
Business Partner S4HANA.pdf
 
Implementing SAP security in 5 steps
Implementing SAP security in 5 stepsImplementing SAP security in 5 steps
Implementing SAP security in 5 steps
 
081712 isaca-atl-auditing sap-grc
081712 isaca-atl-auditing sap-grc081712 isaca-atl-auditing sap-grc
081712 isaca-atl-auditing sap-grc
 
Day5 R3 Basis Security
Day5 R3 Basis   SecurityDay5 R3 Basis   Security
Day5 R3 Basis Security
 
Workbench and customising request
Workbench and customising requestWorkbench and customising request
Workbench and customising request
 
SAP Landscape
SAP Landscape SAP Landscape
SAP Landscape
 
Fiori and S/4 authorizations: What are the biggest challenges, and where do t...
Fiori and S/4 authorizations: What are the biggest challenges, and where do t...Fiori and S/4 authorizations: What are the biggest challenges, and where do t...
Fiori and S/4 authorizations: What are the biggest challenges, and where do t...
 
SAP HANA SPS08 Security
SAP HANA SPS08 SecuritySAP HANA SPS08 Security
SAP HANA SPS08 Security
 
T codes sap-basis-training
T codes sap-basis-trainingT codes sap-basis-training
T codes sap-basis-training
 
Anil kumar sap security & GRC
Anil kumar sap security & GRCAnil kumar sap security & GRC
Anil kumar sap security & GRC
 
Sap User Exit for Functional Consultant
Sap User Exit for Functional ConsultantSap User Exit for Functional Consultant
Sap User Exit for Functional Consultant
 

Viewers also liked

SAP Basis Training Material | www.sapdocs.info
SAP Basis Training Material | www.sapdocs.infoSAP Basis Training Material | www.sapdocs.info
SAP Basis Training Material | www.sapdocs.infosapdocs. info
 
SAP Configuration Guide for Functional Modules (Based on IDES)
SAP Configuration Guide for Functional Modules (Based on IDES)SAP Configuration Guide for Functional Modules (Based on IDES)
SAP Configuration Guide for Functional Modules (Based on IDES)sapdocs. info
 
SAP FICO BBP Sample Document PDF NEW!
SAP FICO BBP Sample Document PDF NEW!SAP FICO BBP Sample Document PDF NEW!
SAP FICO BBP Sample Document PDF NEW!sapdocs. info
 
SAP FI AP: End User Guide for Beginners
SAP FI AP: End User Guide for BeginnersSAP FI AP: End User Guide for Beginners
SAP FI AP: End User Guide for Beginnerssapdocs. info
 
SAP MM Configuration - Real Project Documentation
SAP MM Configuration - Real Project DocumentationSAP MM Configuration - Real Project Documentation
SAP MM Configuration - Real Project Documentationsapdocs. info
 
LSMW Tutorial (Spanish Espanol)
LSMW Tutorial (Spanish Espanol)LSMW Tutorial (Spanish Espanol)
LSMW Tutorial (Spanish Espanol)sapdocs. info
 
SAP FI Asset Accounting: End User Guide for Beginners
SAP FI Asset Accounting: End User Guide for BeginnersSAP FI Asset Accounting: End User Guide for Beginners
SAP FI Asset Accounting: End User Guide for Beginnerssapdocs. info
 
SAP PM Master Data Training Guide
SAP PM Master Data Training GuideSAP PM Master Data Training Guide
SAP PM Master Data Training Guidesapdocs. info
 
SAP FI AR: End User Guide for Beginners
SAP FI AR: End User Guide for BeginnersSAP FI AR: End User Guide for Beginners
SAP FI AR: End User Guide for Beginnerssapdocs. info
 
SAP PP MRP Guide for Beginners
SAP PP MRP Guide for BeginnersSAP PP MRP Guide for Beginners
SAP PP MRP Guide for Beginnerssapdocs. info
 
SAP SD Certification (C_TSCM62_66) Preparation Training Notes
SAP SD Certification (C_TSCM62_66) Preparation Training NotesSAP SD Certification (C_TSCM62_66) Preparation Training Notes
SAP SD Certification (C_TSCM62_66) Preparation Training Notessapdocs. info
 
Variant Configuration in SAP PP: Beginner's Guide
Variant Configuration in SAP PP: Beginner's GuideVariant Configuration in SAP PP: Beginner's Guide
Variant Configuration in SAP PP: Beginner's Guidesapdocs. info
 
ABAP Basico para Consultores Funcionales
ABAP Basico para Consultores FuncionalesABAP Basico para Consultores Funcionales
ABAP Basico para Consultores Funcionalessapdocs. info
 
SAP FI AP: Configuration & End User Guide
SAP FI AP: Configuration & End User GuideSAP FI AP: Configuration & End User Guide
SAP FI AP: Configuration & End User Guidesapdocs. info
 
SAP FI-AP TCODES & MENU PATHS
SAP FI-AP TCODES & MENU PATHSSAP FI-AP TCODES & MENU PATHS
SAP FI-AP TCODES & MENU PATHSsapdocs. info
 
SAP PM Training Manual - www.sapdocs.info
SAP PM Training Manual - www.sapdocs.infoSAP PM Training Manual - www.sapdocs.info
SAP PM Training Manual - www.sapdocs.infosapdocs. info
 
SAP FI-AR TCODES & MENU PATHS
SAP FI-AR TCODES & MENU PATHSSAP FI-AR TCODES & MENU PATHS
SAP FI-AR TCODES & MENU PATHSsapdocs. info
 
SAP HR Time Management User Guide | www.sapdocs.info
SAP HR Time Management User Guide | www.sapdocs.infoSAP HR Time Management User Guide | www.sapdocs.info
SAP HR Time Management User Guide | www.sapdocs.infosapdocs. info
 
SAP PP End User Document - www.sapdocs.info
SAP PP End User Document - www.sapdocs.infoSAP PP End User Document - www.sapdocs.info
SAP PP End User Document - www.sapdocs.infosapdocs. info
 
Variant Configurition in SAP: Beginners Guide | www.sapdocs.info
Variant Configurition in SAP: Beginners Guide | www.sapdocs.infoVariant Configurition in SAP: Beginners Guide | www.sapdocs.info
Variant Configurition in SAP: Beginners Guide | www.sapdocs.infosapdocs. info
 

Viewers also liked (20)

SAP Basis Training Material | www.sapdocs.info
SAP Basis Training Material | www.sapdocs.infoSAP Basis Training Material | www.sapdocs.info
SAP Basis Training Material | www.sapdocs.info
 
SAP Configuration Guide for Functional Modules (Based on IDES)
SAP Configuration Guide for Functional Modules (Based on IDES)SAP Configuration Guide for Functional Modules (Based on IDES)
SAP Configuration Guide for Functional Modules (Based on IDES)
 
SAP FICO BBP Sample Document PDF NEW!
SAP FICO BBP Sample Document PDF NEW!SAP FICO BBP Sample Document PDF NEW!
SAP FICO BBP Sample Document PDF NEW!
 
SAP FI AP: End User Guide for Beginners
SAP FI AP: End User Guide for BeginnersSAP FI AP: End User Guide for Beginners
SAP FI AP: End User Guide for Beginners
 
SAP MM Configuration - Real Project Documentation
SAP MM Configuration - Real Project DocumentationSAP MM Configuration - Real Project Documentation
SAP MM Configuration - Real Project Documentation
 
LSMW Tutorial (Spanish Espanol)
LSMW Tutorial (Spanish Espanol)LSMW Tutorial (Spanish Espanol)
LSMW Tutorial (Spanish Espanol)
 
SAP FI Asset Accounting: End User Guide for Beginners
SAP FI Asset Accounting: End User Guide for BeginnersSAP FI Asset Accounting: End User Guide for Beginners
SAP FI Asset Accounting: End User Guide for Beginners
 
SAP PM Master Data Training Guide
SAP PM Master Data Training GuideSAP PM Master Data Training Guide
SAP PM Master Data Training Guide
 
SAP FI AR: End User Guide for Beginners
SAP FI AR: End User Guide for BeginnersSAP FI AR: End User Guide for Beginners
SAP FI AR: End User Guide for Beginners
 
SAP PP MRP Guide for Beginners
SAP PP MRP Guide for BeginnersSAP PP MRP Guide for Beginners
SAP PP MRP Guide for Beginners
 
SAP SD Certification (C_TSCM62_66) Preparation Training Notes
SAP SD Certification (C_TSCM62_66) Preparation Training NotesSAP SD Certification (C_TSCM62_66) Preparation Training Notes
SAP SD Certification (C_TSCM62_66) Preparation Training Notes
 
Variant Configuration in SAP PP: Beginner's Guide
Variant Configuration in SAP PP: Beginner's GuideVariant Configuration in SAP PP: Beginner's Guide
Variant Configuration in SAP PP: Beginner's Guide
 
ABAP Basico para Consultores Funcionales
ABAP Basico para Consultores FuncionalesABAP Basico para Consultores Funcionales
ABAP Basico para Consultores Funcionales
 
SAP FI AP: Configuration & End User Guide
SAP FI AP: Configuration & End User GuideSAP FI AP: Configuration & End User Guide
SAP FI AP: Configuration & End User Guide
 
SAP FI-AP TCODES & MENU PATHS
SAP FI-AP TCODES & MENU PATHSSAP FI-AP TCODES & MENU PATHS
SAP FI-AP TCODES & MENU PATHS
 
SAP PM Training Manual - www.sapdocs.info
SAP PM Training Manual - www.sapdocs.infoSAP PM Training Manual - www.sapdocs.info
SAP PM Training Manual - www.sapdocs.info
 
SAP FI-AR TCODES & MENU PATHS
SAP FI-AR TCODES & MENU PATHSSAP FI-AR TCODES & MENU PATHS
SAP FI-AR TCODES & MENU PATHS
 
SAP HR Time Management User Guide | www.sapdocs.info
SAP HR Time Management User Guide | www.sapdocs.infoSAP HR Time Management User Guide | www.sapdocs.info
SAP HR Time Management User Guide | www.sapdocs.info
 
SAP PP End User Document - www.sapdocs.info
SAP PP End User Document - www.sapdocs.infoSAP PP End User Document - www.sapdocs.info
SAP PP End User Document - www.sapdocs.info
 
Variant Configurition in SAP: Beginners Guide | www.sapdocs.info
Variant Configurition in SAP: Beginners Guide | www.sapdocs.infoVariant Configurition in SAP: Beginners Guide | www.sapdocs.info
Variant Configurition in SAP: Beginners Guide | www.sapdocs.info
 

Similar to Authorisation Concept In SAP | http://sapdocs.info

Anypoint access management - Roles
Anypoint access management - RolesAnypoint access management - Roles
Anypoint access management - RolesShanky Gupta
 
359555069 aae-control room-usermanual
359555069 aae-control room-usermanual359555069 aae-control room-usermanual
359555069 aae-control room-usermanualBishnujitBanerjee
 
Users and roles sitefinity guide
Users and roles  sitefinity guideUsers and roles  sitefinity guide
Users and roles sitefinity guideRoshith S Pai
 
SAP_HANA_SECURITY_overview_online_Resear.docx
SAP_HANA_SECURITY_overview_online_Resear.docxSAP_HANA_SECURITY_overview_online_Resear.docx
SAP_HANA_SECURITY_overview_online_Resear.docxjuancusa
 
24 - Panorama Necto 14 administration - visualization & data discovery solution
24  - Panorama Necto 14 administration - visualization & data discovery solution24  - Panorama Necto 14 administration - visualization & data discovery solution
24 - Panorama Necto 14 administration - visualization & data discovery solutionPanorama Software
 
Winter24-Welly Release Overview - Stephen Stanley.pdf
Winter24-Welly Release Overview - Stephen Stanley.pdfWinter24-Welly Release Overview - Stephen Stanley.pdf
Winter24-Welly Release Overview - Stephen Stanley.pdfAnna Loughnan Colquhoun
 
Automation Hub Best Practices - Large Scale Rollouts.pdf
Automation Hub Best Practices - Large Scale Rollouts.pdfAutomation Hub Best Practices - Large Scale Rollouts.pdf
Automation Hub Best Practices - Large Scale Rollouts.pdfCristina Vidu
 
ORACLE FUSION FINANCIAL CLOUD FEATURES - CREATING IMPLEMENTATION USERS
ORACLE FUSION FINANCIAL CLOUD FEATURES - CREATING IMPLEMENTATION USERSORACLE FUSION FINANCIAL CLOUD FEATURES - CREATING IMPLEMENTATION USERS
ORACLE FUSION FINANCIAL CLOUD FEATURES - CREATING IMPLEMENTATION USERSIQ Online Training
 
Implement Authorization in your Apps with Microsoft identity platform-June 2020
Implement Authorization in your Apps with Microsoft identity platform-June 2020Implement Authorization in your Apps with Microsoft identity platform-June 2020
Implement Authorization in your Apps with Microsoft identity platform-June 2020Microsoft 365 Developer
 
Cis407 a ilab 6 web application development devry university
Cis407 a ilab 6 web application development devry universityCis407 a ilab 6 web application development devry university
Cis407 a ilab 6 web application development devry universitylhkslkdh89009
 
10 necto administration_ready
10 necto administration_ready10 necto administration_ready
10 necto administration_readywww.panorama.com
 
Blog Management System
Blog Management SystemBlog Management System
Blog Management SystemStudentRocks
 
Anypoint access management
Anypoint access management Anypoint access management
Anypoint access management Shanky Gupta
 
Whitepaper: Continuous Compliance in SAP Environments - Happiest Minds
Whitepaper: Continuous Compliance in SAP Environments - Happiest MindsWhitepaper: Continuous Compliance in SAP Environments - Happiest Minds
Whitepaper: Continuous Compliance in SAP Environments - Happiest MindsHappiest Minds Technologies
 

Similar to Authorisation Concept In SAP | http://sapdocs.info (20)

Anypoint access management - Roles
Anypoint access management - RolesAnypoint access management - Roles
Anypoint access management - Roles
 
359555069 aae-control room-usermanual
359555069 aae-control room-usermanual359555069 aae-control room-usermanual
359555069 aae-control room-usermanual
 
Users and roles sitefinity guide
Users and roles  sitefinity guideUsers and roles  sitefinity guide
Users and roles sitefinity guide
 
SAP_HANA_SECURITY_overview_online_Resear.docx
SAP_HANA_SECURITY_overview_online_Resear.docxSAP_HANA_SECURITY_overview_online_Resear.docx
SAP_HANA_SECURITY_overview_online_Resear.docx
 
24 - Panorama Necto 14 administration - visualization & data discovery solution
24  - Panorama Necto 14 administration - visualization & data discovery solution24  - Panorama Necto 14 administration - visualization & data discovery solution
24 - Panorama Necto 14 administration - visualization & data discovery solution
 
Winter24-Welly Release Overview - Stephen Stanley.pdf
Winter24-Welly Release Overview - Stephen Stanley.pdfWinter24-Welly Release Overview - Stephen Stanley.pdf
Winter24-Welly Release Overview - Stephen Stanley.pdf
 
Automation Hub Best Practices - Large Scale Rollouts.pdf
Automation Hub Best Practices - Large Scale Rollouts.pdfAutomation Hub Best Practices - Large Scale Rollouts.pdf
Automation Hub Best Practices - Large Scale Rollouts.pdf
 
ORACLE FUSION FINANCIAL CLOUD FEATURES - CREATING IMPLEMENTATION USERS
ORACLE FUSION FINANCIAL CLOUD FEATURES - CREATING IMPLEMENTATION USERSORACLE FUSION FINANCIAL CLOUD FEATURES - CREATING IMPLEMENTATION USERS
ORACLE FUSION FINANCIAL CLOUD FEATURES - CREATING IMPLEMENTATION USERS
 
Implement Authorization in your Apps with Microsoft identity platform-June 2020
Implement Authorization in your Apps with Microsoft identity platform-June 2020Implement Authorization in your Apps with Microsoft identity platform-June 2020
Implement Authorization in your Apps with Microsoft identity platform-June 2020
 
Sap basis and_security_administration
Sap basis and_security_administrationSap basis and_security_administration
Sap basis and_security_administration
 
BMS-PPT-7viyvv.pptx
BMS-PPT-7viyvv.pptxBMS-PPT-7viyvv.pptx
BMS-PPT-7viyvv.pptx
 
Cis407 a ilab 6 web application development devry university
Cis407 a ilab 6 web application development devry universityCis407 a ilab 6 web application development devry university
Cis407 a ilab 6 web application development devry university
 
Abap proxies
Abap proxiesAbap proxies
Abap proxies
 
Oracle_Procurement_Cloud_Release_8_Whats_New
Oracle_Procurement_Cloud_Release_8_Whats_NewOracle_Procurement_Cloud_Release_8_Whats_New
Oracle_Procurement_Cloud_Release_8_Whats_New
 
10 necto administration_ready
10 necto administration_ready10 necto administration_ready
10 necto administration_ready
 
Workflow for XPages
Workflow for XPagesWorkflow for XPages
Workflow for XPages
 
Blog Management System
Blog Management SystemBlog Management System
Blog Management System
 
Anypoint access management
Anypoint access management Anypoint access management
Anypoint access management
 
Roles
RolesRoles
Roles
 
Whitepaper: Continuous Compliance in SAP Environments - Happiest Minds
Whitepaper: Continuous Compliance in SAP Environments - Happiest MindsWhitepaper: Continuous Compliance in SAP Environments - Happiest Minds
Whitepaper: Continuous Compliance in SAP Environments - Happiest Minds
 

More from sapdocs. info

SAP ECC 6.0 PM Configuration Manual - www.sapdocs.info
SAP ECC 6.0 PM Configuration Manual - www.sapdocs.infoSAP ECC 6.0 PM Configuration Manual - www.sapdocs.info
SAP ECC 6.0 PM Configuration Manual - www.sapdocs.infosapdocs. info
 
SAP CO Configuration Guide - Exclusive Document
SAP CO Configuration Guide - Exclusive DocumentSAP CO Configuration Guide - Exclusive Document
SAP CO Configuration Guide - Exclusive Documentsapdocs. info
 
ABAP for Beginners - www.sapdocs.info
ABAP for Beginners - www.sapdocs.infoABAP for Beginners - www.sapdocs.info
ABAP for Beginners - www.sapdocs.infosapdocs. info
 
Exclusive SAP Basis Training Book | www.sapdocs.info
Exclusive SAP Basis Training Book | www.sapdocs.infoExclusive SAP Basis Training Book | www.sapdocs.info
Exclusive SAP Basis Training Book | www.sapdocs.infosapdocs. info
 
SAP Plant Maintenance Training Material | www.sapdocs.info
SAP Plant Maintenance Training Material | www.sapdocs.infoSAP Plant Maintenance Training Material | www.sapdocs.info
SAP Plant Maintenance Training Material | www.sapdocs.infosapdocs. info
 
SAP FICO General Ledger EndUser Training | www.sapdocs.info
SAP FICO General Ledger EndUser Training | www.sapdocs.infoSAP FICO General Ledger EndUser Training | www.sapdocs.info
SAP FICO General Ledger EndUser Training | www.sapdocs.infosapdocs. info
 
HR ABAP Technical Overview | http://sapdocs.info/
HR ABAP Technical Overview | http://sapdocs.info/HR ABAP Technical Overview | http://sapdocs.info/
HR ABAP Technical Overview | http://sapdocs.info/sapdocs. info
 
SAP Accounts Reveivable Introduction | http://sapdocs.info
SAP Accounts Reveivable Introduction | http://sapdocs.infoSAP Accounts Reveivable Introduction | http://sapdocs.info
SAP Accounts Reveivable Introduction | http://sapdocs.infosapdocs. info
 
SAP Accounts Reveivable Functions | http://sapdocs.info
SAP Accounts Reveivable Functions | http://sapdocs.infoSAP Accounts Reveivable Functions | http://sapdocs.info
SAP Accounts Reveivable Functions | http://sapdocs.infosapdocs. info
 
SAP Accounts Reveivable Financial Transaction | http://sapdocs.info
SAP Accounts Reveivable Financial Transaction | http://sapdocs.infoSAP Accounts Reveivable Financial Transaction | http://sapdocs.info
SAP Accounts Reveivable Financial Transaction | http://sapdocs.infosapdocs. info
 
SAP Accounts Reveivable Customer Master | http://sapdocs.info
SAP Accounts Reveivable Customer Master | http://sapdocs.infoSAP Accounts Reveivable Customer Master | http://sapdocs.info
SAP Accounts Reveivable Customer Master | http://sapdocs.infosapdocs. info
 
SAP Accounts Reveivable SAP Documents | http://sapdocs.info
SAP Accounts Reveivable SAP Documents | http://sapdocs.infoSAP Accounts Reveivable SAP Documents | http://sapdocs.info
SAP Accounts Reveivable SAP Documents | http://sapdocs.infosapdocs. info
 

More from sapdocs. info (12)

SAP ECC 6.0 PM Configuration Manual - www.sapdocs.info
SAP ECC 6.0 PM Configuration Manual - www.sapdocs.infoSAP ECC 6.0 PM Configuration Manual - www.sapdocs.info
SAP ECC 6.0 PM Configuration Manual - www.sapdocs.info
 
SAP CO Configuration Guide - Exclusive Document
SAP CO Configuration Guide - Exclusive DocumentSAP CO Configuration Guide - Exclusive Document
SAP CO Configuration Guide - Exclusive Document
 
ABAP for Beginners - www.sapdocs.info
ABAP for Beginners - www.sapdocs.infoABAP for Beginners - www.sapdocs.info
ABAP for Beginners - www.sapdocs.info
 
Exclusive SAP Basis Training Book | www.sapdocs.info
Exclusive SAP Basis Training Book | www.sapdocs.infoExclusive SAP Basis Training Book | www.sapdocs.info
Exclusive SAP Basis Training Book | www.sapdocs.info
 
SAP Plant Maintenance Training Material | www.sapdocs.info
SAP Plant Maintenance Training Material | www.sapdocs.infoSAP Plant Maintenance Training Material | www.sapdocs.info
SAP Plant Maintenance Training Material | www.sapdocs.info
 
SAP FICO General Ledger EndUser Training | www.sapdocs.info
SAP FICO General Ledger EndUser Training | www.sapdocs.infoSAP FICO General Ledger EndUser Training | www.sapdocs.info
SAP FICO General Ledger EndUser Training | www.sapdocs.info
 
HR ABAP Technical Overview | http://sapdocs.info/
HR ABAP Technical Overview | http://sapdocs.info/HR ABAP Technical Overview | http://sapdocs.info/
HR ABAP Technical Overview | http://sapdocs.info/
 
SAP Accounts Reveivable Introduction | http://sapdocs.info
SAP Accounts Reveivable Introduction | http://sapdocs.infoSAP Accounts Reveivable Introduction | http://sapdocs.info
SAP Accounts Reveivable Introduction | http://sapdocs.info
 
SAP Accounts Reveivable Functions | http://sapdocs.info
SAP Accounts Reveivable Functions | http://sapdocs.infoSAP Accounts Reveivable Functions | http://sapdocs.info
SAP Accounts Reveivable Functions | http://sapdocs.info
 
SAP Accounts Reveivable Financial Transaction | http://sapdocs.info
SAP Accounts Reveivable Financial Transaction | http://sapdocs.infoSAP Accounts Reveivable Financial Transaction | http://sapdocs.info
SAP Accounts Reveivable Financial Transaction | http://sapdocs.info
 
SAP Accounts Reveivable Customer Master | http://sapdocs.info
SAP Accounts Reveivable Customer Master | http://sapdocs.infoSAP Accounts Reveivable Customer Master | http://sapdocs.info
SAP Accounts Reveivable Customer Master | http://sapdocs.info
 
SAP Accounts Reveivable SAP Documents | http://sapdocs.info
SAP Accounts Reveivable SAP Documents | http://sapdocs.infoSAP Accounts Reveivable SAP Documents | http://sapdocs.info
SAP Accounts Reveivable SAP Documents | http://sapdocs.info
 

Recently uploaded

3.14.24 Gender Discrimination and Gender Inequity.pptx
3.14.24 Gender Discrimination and Gender Inequity.pptx3.14.24 Gender Discrimination and Gender Inequity.pptx
3.14.24 Gender Discrimination and Gender Inequity.pptxmary850239
 
3.12.24 Freedom Summer in Mississippi.pptx
3.12.24 Freedom Summer in Mississippi.pptx3.12.24 Freedom Summer in Mississippi.pptx
3.12.24 Freedom Summer in Mississippi.pptxmary850239
 
25 CHUYÊN ĐỀ ÔN THI TỐT NGHIỆP THPT 2023 – BÀI TẬP PHÁT TRIỂN TỪ ĐỀ MINH HỌA...
25 CHUYÊN ĐỀ ÔN THI TỐT NGHIỆP THPT 2023 – BÀI TẬP PHÁT TRIỂN TỪ ĐỀ MINH HỌA...25 CHUYÊN ĐỀ ÔN THI TỐT NGHIỆP THPT 2023 – BÀI TẬP PHÁT TRIỂN TỪ ĐỀ MINH HỌA...
25 CHUYÊN ĐỀ ÔN THI TỐT NGHIỆP THPT 2023 – BÀI TẬP PHÁT TRIỂN TỪ ĐỀ MINH HỌA...Nguyen Thanh Tu Collection
 
2024 March 11, Telehealth Billing- Current Telehealth CPT Codes & Telehealth ...
2024 March 11, Telehealth Billing- Current Telehealth CPT Codes & Telehealth ...2024 March 11, Telehealth Billing- Current Telehealth CPT Codes & Telehealth ...
2024 March 11, Telehealth Billing- Current Telehealth CPT Codes & Telehealth ...Marlene Maheu
 
Quantitative research methodology and survey design
Quantitative research methodology and survey designQuantitative research methodology and survey design
Quantitative research methodology and survey designBalelaBoru
 
LEAD6001 - Introduction to Advanced Stud
LEAD6001 - Introduction to Advanced StudLEAD6001 - Introduction to Advanced Stud
LEAD6001 - Introduction to Advanced StudDr. Bruce A. Johnson
 
AI Uses and Misuses: Academic and Workplace Applications
AI Uses and Misuses: Academic and Workplace ApplicationsAI Uses and Misuses: Academic and Workplace Applications
AI Uses and Misuses: Academic and Workplace ApplicationsStella Lee
 
30-de-thi-vao-lop-10-mon-tieng-anh-co-dap-an.doc
30-de-thi-vao-lop-10-mon-tieng-anh-co-dap-an.doc30-de-thi-vao-lop-10-mon-tieng-anh-co-dap-an.doc
30-de-thi-vao-lop-10-mon-tieng-anh-co-dap-an.docdieu18
 
Metabolism of lipoproteins & its disorders(Chylomicron & VLDL & LDL).pptx
Metabolism of  lipoproteins & its disorders(Chylomicron & VLDL & LDL).pptxMetabolism of  lipoproteins & its disorders(Chylomicron & VLDL & LDL).pptx
Metabolism of lipoproteins & its disorders(Chylomicron & VLDL & LDL).pptxDr. Santhosh Kumar. N
 
EDD8524 The Future of Educational Leader
EDD8524 The Future of Educational LeaderEDD8524 The Future of Educational Leader
EDD8524 The Future of Educational LeaderDr. Bruce A. Johnson
 
Pharmacology chapter No 7 full notes.pdf
Pharmacology chapter No 7 full notes.pdfPharmacology chapter No 7 full notes.pdf
Pharmacology chapter No 7 full notes.pdfSumit Tiwari
 
BBA 205 BUSINESS ENVIRONMENT UNIT I.pptx
BBA 205 BUSINESS ENVIRONMENT UNIT I.pptxBBA 205 BUSINESS ENVIRONMENT UNIT I.pptx
BBA 205 BUSINESS ENVIRONMENT UNIT I.pptxProf. Kanchan Kumari
 
Riti theory by Vamana Indian poetics.pptx
Riti theory by Vamana Indian poetics.pptxRiti theory by Vamana Indian poetics.pptx
Riti theory by Vamana Indian poetics.pptxDhatriParmar
 
3.14.24 The Selma March and the Voting Rights Act.pptx
3.14.24 The Selma March and the Voting Rights Act.pptx3.14.24 The Selma March and the Voting Rights Act.pptx
3.14.24 The Selma March and the Voting Rights Act.pptxmary850239
 
LEAD6001 - Introduction to Advanced Stud
LEAD6001 - Introduction to Advanced StudLEAD6001 - Introduction to Advanced Stud
LEAD6001 - Introduction to Advanced StudDr. Bruce A. Johnson
 
BÀI TẬP BỔ TRỢ TIẾNG ANH 11 THEO ĐƠN VỊ BÀI HỌC - CẢ NĂM - CÓ FILE NGHE (GLOB...
BÀI TẬP BỔ TRỢ TIẾNG ANH 11 THEO ĐƠN VỊ BÀI HỌC - CẢ NĂM - CÓ FILE NGHE (GLOB...BÀI TẬP BỔ TRỢ TIẾNG ANH 11 THEO ĐƠN VỊ BÀI HỌC - CẢ NĂM - CÓ FILE NGHE (GLOB...
BÀI TẬP BỔ TRỢ TIẾNG ANH 11 THEO ĐƠN VỊ BÀI HỌC - CẢ NĂM - CÓ FILE NGHE (GLOB...Nguyen Thanh Tu Collection
 
VIT336 – Recommender System - Unit 3.pdf
VIT336 – Recommender System - Unit 3.pdfVIT336 – Recommender System - Unit 3.pdf
VIT336 – Recommender System - Unit 3.pdfArthyR3
 
LEAD5623 The Economics of Community Coll
LEAD5623 The Economics of Community CollLEAD5623 The Economics of Community Coll
LEAD5623 The Economics of Community CollDr. Bruce A. Johnson
 
Certification Study Group - Professional ML Engineer Session 3 (Machine Learn...
Certification Study Group - Professional ML Engineer Session 3 (Machine Learn...Certification Study Group - Professional ML Engineer Session 3 (Machine Learn...
Certification Study Group - Professional ML Engineer Session 3 (Machine Learn...gdgsurrey
 
BBA 205 BE UNIT 2 economic systems prof dr kanchan.pptx
BBA 205 BE UNIT 2 economic systems prof dr kanchan.pptxBBA 205 BE UNIT 2 economic systems prof dr kanchan.pptx
BBA 205 BE UNIT 2 economic systems prof dr kanchan.pptxProf. Kanchan Kumari
 

Recently uploaded (20)

3.14.24 Gender Discrimination and Gender Inequity.pptx
3.14.24 Gender Discrimination and Gender Inequity.pptx3.14.24 Gender Discrimination and Gender Inequity.pptx
3.14.24 Gender Discrimination and Gender Inequity.pptx
 
3.12.24 Freedom Summer in Mississippi.pptx
3.12.24 Freedom Summer in Mississippi.pptx3.12.24 Freedom Summer in Mississippi.pptx
3.12.24 Freedom Summer in Mississippi.pptx
 
25 CHUYÊN ĐỀ ÔN THI TỐT NGHIỆP THPT 2023 – BÀI TẬP PHÁT TRIỂN TỪ ĐỀ MINH HỌA...
25 CHUYÊN ĐỀ ÔN THI TỐT NGHIỆP THPT 2023 – BÀI TẬP PHÁT TRIỂN TỪ ĐỀ MINH HỌA...25 CHUYÊN ĐỀ ÔN THI TỐT NGHIỆP THPT 2023 – BÀI TẬP PHÁT TRIỂN TỪ ĐỀ MINH HỌA...
25 CHUYÊN ĐỀ ÔN THI TỐT NGHIỆP THPT 2023 – BÀI TẬP PHÁT TRIỂN TỪ ĐỀ MINH HỌA...
 
2024 March 11, Telehealth Billing- Current Telehealth CPT Codes & Telehealth ...
2024 March 11, Telehealth Billing- Current Telehealth CPT Codes & Telehealth ...2024 March 11, Telehealth Billing- Current Telehealth CPT Codes & Telehealth ...
2024 March 11, Telehealth Billing- Current Telehealth CPT Codes & Telehealth ...
 
Quantitative research methodology and survey design
Quantitative research methodology and survey designQuantitative research methodology and survey design
Quantitative research methodology and survey design
 
LEAD6001 - Introduction to Advanced Stud
LEAD6001 - Introduction to Advanced StudLEAD6001 - Introduction to Advanced Stud
LEAD6001 - Introduction to Advanced Stud
 
AI Uses and Misuses: Academic and Workplace Applications
AI Uses and Misuses: Academic and Workplace ApplicationsAI Uses and Misuses: Academic and Workplace Applications
AI Uses and Misuses: Academic and Workplace Applications
 
30-de-thi-vao-lop-10-mon-tieng-anh-co-dap-an.doc
30-de-thi-vao-lop-10-mon-tieng-anh-co-dap-an.doc30-de-thi-vao-lop-10-mon-tieng-anh-co-dap-an.doc
30-de-thi-vao-lop-10-mon-tieng-anh-co-dap-an.doc
 
Metabolism of lipoproteins & its disorders(Chylomicron & VLDL & LDL).pptx
Metabolism of  lipoproteins & its disorders(Chylomicron & VLDL & LDL).pptxMetabolism of  lipoproteins & its disorders(Chylomicron & VLDL & LDL).pptx
Metabolism of lipoproteins & its disorders(Chylomicron & VLDL & LDL).pptx
 
EDD8524 The Future of Educational Leader
EDD8524 The Future of Educational LeaderEDD8524 The Future of Educational Leader
EDD8524 The Future of Educational Leader
 
Pharmacology chapter No 7 full notes.pdf
Pharmacology chapter No 7 full notes.pdfPharmacology chapter No 7 full notes.pdf
Pharmacology chapter No 7 full notes.pdf
 
BBA 205 BUSINESS ENVIRONMENT UNIT I.pptx
BBA 205 BUSINESS ENVIRONMENT UNIT I.pptxBBA 205 BUSINESS ENVIRONMENT UNIT I.pptx
BBA 205 BUSINESS ENVIRONMENT UNIT I.pptx
 
Riti theory by Vamana Indian poetics.pptx
Riti theory by Vamana Indian poetics.pptxRiti theory by Vamana Indian poetics.pptx
Riti theory by Vamana Indian poetics.pptx
 
3.14.24 The Selma March and the Voting Rights Act.pptx
3.14.24 The Selma March and the Voting Rights Act.pptx3.14.24 The Selma March and the Voting Rights Act.pptx
3.14.24 The Selma March and the Voting Rights Act.pptx
 
LEAD6001 - Introduction to Advanced Stud
LEAD6001 - Introduction to Advanced StudLEAD6001 - Introduction to Advanced Stud
LEAD6001 - Introduction to Advanced Stud
 
BÀI TẬP BỔ TRỢ TIẾNG ANH 11 THEO ĐƠN VỊ BÀI HỌC - CẢ NĂM - CÓ FILE NGHE (GLOB...
BÀI TẬP BỔ TRỢ TIẾNG ANH 11 THEO ĐƠN VỊ BÀI HỌC - CẢ NĂM - CÓ FILE NGHE (GLOB...BÀI TẬP BỔ TRỢ TIẾNG ANH 11 THEO ĐƠN VỊ BÀI HỌC - CẢ NĂM - CÓ FILE NGHE (GLOB...
BÀI TẬP BỔ TRỢ TIẾNG ANH 11 THEO ĐƠN VỊ BÀI HỌC - CẢ NĂM - CÓ FILE NGHE (GLOB...
 
VIT336 – Recommender System - Unit 3.pdf
VIT336 – Recommender System - Unit 3.pdfVIT336 – Recommender System - Unit 3.pdf
VIT336 – Recommender System - Unit 3.pdf
 
LEAD5623 The Economics of Community Coll
LEAD5623 The Economics of Community CollLEAD5623 The Economics of Community Coll
LEAD5623 The Economics of Community Coll
 
Certification Study Group - Professional ML Engineer Session 3 (Machine Learn...
Certification Study Group - Professional ML Engineer Session 3 (Machine Learn...Certification Study Group - Professional ML Engineer Session 3 (Machine Learn...
Certification Study Group - Professional ML Engineer Session 3 (Machine Learn...
 
BBA 205 BE UNIT 2 economic systems prof dr kanchan.pptx
BBA 205 BE UNIT 2 economic systems prof dr kanchan.pptxBBA 205 BE UNIT 2 economic systems prof dr kanchan.pptx
BBA 205 BE UNIT 2 economic systems prof dr kanchan.pptx
 

Authorisation Concept In SAP | http://sapdocs.info

  • 1. Authorization Concept The authorizations for users are created using roles and profiles. The administrator creates the roles, and the system supports him or her in creating the associated authorizations. Authorization B Object Class Authorization Object A Create, Change,Display User Master SUPER Maintenance: User Groups B Basis Admin Activity Display User Group Finance Fig 1.1 Authorization Concepts Authorization objects allow complex checks that involve multiple conditions that allow a user to perform an action. An authorization is always associated with exactly one authorization object and contains the value for the fields for the authorization objects. An authorization is a permission to perform a certain action in the SAP System. The action is defined on the basis of the values for the individual fields of an authorization object. When a user logs on to a client of an SAP system, his or her authorizations are loaded in the user context. The user context is in the user buffer( in the main memory) of the application Server. When the user calls a transaction, the system checks whether the use has an authorization in the user context that allows him/her to call the selected transaction. Authorization checks use the authorizations in the user context. All the authorizations are permissions. There are no authorizations for prohibiting. Everything that is not explicitly allowed is forbidden. The user gets the necessary authorization through Roles. The role also contains the authorizations users need to access the transactions, reports, web-based applications and so on, contained in the menu. The details of user administration is specified in my other BOK “User Administration in SAP R3 System”. How to Create a new Role
  • 2. There are 2 ways, for creation of new roles • Copy an existing role (SAP pre-defined role). • Creating a new role, based up on the business requirements. Copy an existing role You can use the user role examples just as they are delivered with the SAP System. Prerequisites Check the suitability of the roles delivered by SAP before you create your own roles. If you want to modify them, all you need to do is copy the SAP template (Roles provided by SAP). And modify that newly created one. Procedure The copying a existing role is described below. Using this icon (Copy Role). . To create a single role: 1. Choose the pushbutton Create role or the transaction PFCG in the initial transaction SAP Easy Access. You go to the role maintenance. 2. Choose the pushbutton Copy role. 3. Now select the appropriate role, delivered by SAP in the source role and specify the user defined role as the target role 4. Now choose the pushbutton “copy all/ copy selectively.” 5. Now new role has been created successfully. Now we can edit the new role by pressing the pushbutton “change role”. 6. And based on the requirements deselect/remove unnecessary authorizations from that SAP.
  • 3. 7. Now we can assign this new role to the user. This reduces the risk of giving all the authorizations to a user.
  • 4. For example, consider a business scenario where we want to create a role for a particular user, who works in sales department. Creating a new role Based up on the business requirements we have to create roles, which are not provided by SAP. Here in the above scenario, we have to assign only that particular role with which he will be able to create, change and view the Sales Order. Procedure The creation of a single role is described below. To create a single role: 1. Choose the pushbutton Create role or the transaction PFCG in the initial transaction SAP Easy Access. You go to the role maintenance.
  • 5. 2. Specify a name for the role. The roles delivered by SAP have the prefix 'SAP_'. Do not use the SAP namespace for your user roles. 3. To distinguish between the names of User defined roles and SAP predefined roles, we will prefix the role with ‘Z_’ or ‘Y_’. 4. Choose Create Role. 5. Enter a meaningful role description text. You can describe the activities in the role in detail. And save the role. You may use an existing role as a reference.
  • 6. Assign transactions, programs and/or web addresses to the role in the Menu tab.
  • 7. 6. The user menu which you create here is called automatically when the user to whom this role is assigned logs on to the SAP System.
  • 8. 7. You can create the authorizations for the transactions in the role menu structure in the authorizations tab. To get the profile name for this particular role, press the pushbutton “propose profile names”. SAP will supply with a profile name. And press the pushbutton ‘Change Authorization Data’ for maintaining authorization data and generating profiles. Profile generator
  • 9. Specify the company code, division, sales organization distribution channel etc, press Save button. If we don’t specify any organization code, we will see the red color dot against each Authorization Object. To avoid this, its better to specify the company code and the rest. Authorization object Activity User group Tasks For each role, there will be some Authorization objects, User group, Activity and Tasks, which I had specified in fig 1.1. However, all the authorization values must be manually checked and adjusted if required in accordance with the actual requirements and authorities. Profile generator
  • 10. Once we see all the authorization object are green, then we can generate the profile for this particular role by pressing that ‘generate’ pushbutton . With this we have successfully created a role. Advanced Concepts If you want to call the transactions in a role in another system, enter the RFC destination of the other system in the Target system field. You should only use RFC destinations which were created using the Trusted System concept to guarantee that the same user is used in the target system. This is only necessary if you want to navigate via the Easy Access Menu in the SAPgui. If you use the Workplace Web Browser, you can use any destination containing a logical system with the same name. If the Target system field is empty, the transactions are called in the system in which the user is logged on. You can also specify a variable which refers to an RFC destination. Variables are assigned to the RFC destinations in the transaction SM30_SSM_RFC. To distribute the role into a particular target system, specify the target system (its Release must be 4.6C) and choose Distribute. This function is most useful when you use the Workplace.
  • 11. You can create the user menu: o from the SAP menu You can copy complete menu branches from the SAP menu by clicking on the cross in front of it in the user menu. Expand the menu branch if you want to put lower-level nodes or individual transactions/programs in the user menu. o from a role this function copies a defined role menu structure in the same system into the current role. You can also copy the menu structure of a role delivered by SAP. Click on the menu branches and copy them. o from an area menu You can copy area menus (SAP Standard and your own) into a role menu. Choose an area menu from the list of menus and copy the transactions you want. o Import from file o Transaction You can put a transaction code in the user menu directly.
  • 12. o Program This function puts programs, transaction variants or queries in the user menu. They need not be given a transaction code. ABAP Report Choose a report and a variant. You can skip the selection screen. o Others By choosing the other button, you can add Internet Address or Links or Files. When integrating files, you must use the storage paths instead of URLs. You can also specify BW Web Reports, and links to external mail systems and Knowledge Warehouse. 7. Save your entries. Result You have created a role. Role maintenance automatically creates the authorizations that are associated with the transactions specified in the menu tree. However, all the authorization values
  • 13. must be manually checked and adjusted if required in accordance with the actual requirements and authorities.