How to improve user experience via roles


Published on

SAP Security authorization concepts

Published in: Technology
1 Like
  • Be the first to comment

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

How to improve user experience via roles

  1. 1. T T N 0 .3 V1 VE RO P M I ER US XP E TO W O LES H O R P SA AG
  2. 2. AGENDA Overview © SAP 2009 / Page 2 © SAP 2009 / Page 2
  3. 3. ROLES IN NWBC  A role is a menu that a user in a company needs for his/her work  Focus on User  Specific  Extract of Easy Access Menu (and more) © SAP 2009 / Page 3
  4. 4. PREDEFINED ROLES (*AIO*)  With SAP ERP enhancement package 3 and 4, pre-defined roles are delivered that cover content in the form of POWER Lists, reports, and transactions. The roles delivered are intended for small businesses and midsize companies in the production industry and enable efficient access to the processes of Financial Accounting, Controlling, Materials Management, Production Planning and Control, and Sales & Distribution. These roles can be found in transaction pfcg by searching for SAP_AIO_* (technical name).  SAP partners can use the roles as a starting point and adapt them.  Accounts Payable Assistant  Strategic Planner  Accounts Receivable Assistant  Engineering Specialist  Cost Accountant  Purchaser  Financial Accountant  Sales Person  Shop Floor Specialist  Warehouse Specialist  Production Planner  Employee  Administrator
  5. 5. PREDEFINED ROLES (*BPR*)  For EhP4 SP1 some portal roles (PCD – roles) have been migrated to SAP ERP and adapted for the small businesses and midsize companies. Their technical names begin with: SAP_BPR_*.  Buyer  Internal Sales Representative  Maintenance Technician  Production Supervisor  Service Providers
  6. 6. PREDEFINED SAP BEST PRACTICES ROLES  Many predefined roles exist in the Best Practices solutions. Their technical names begin with SAP_BPR* for the solutions based on EhP3 and with SAP_NBPR* for EhP4. For an overview of the used roles see the functional list of each Best Practices Solution (Baseline and Industry Packages). These are for example the roles available in the SAP Best Practices Baseline Package (Germany) – V1.603, delivered with SAP Note 1165371:  Accounts Receivable Accountant  Customs Agent  Sales Billing  Accounts Receivable Manager  Finance Manager  Sales Manager  Accounts Payable Accountant  General Ledger Accountant  Service Agent  Accounts Payable Manager  Maintenance Employee  Service Employee  Administrator   Shop Floor Specialist  Assets Accountant Maintenance of Accounts Receivable Master Data  Strategic Planner Pricing Specialist  Travel Accountant  Bank Accountant   Business Analysis Purchaser  Product Cost Controller  Treasurer  Buyer  Production Planner  Warehouse Clerk  Customs Agent  Project Manager  Warehouse Manager  Employee  Purchasing Manager  Warehouse Monitoring  Engineering Specialist  Quality Specialist  Enterprise Controller  Sales Administration
  7. 7. AGENDA © SAP ge 8 © SAP 2009 / Page 8
  8. 8. CREATE A ROLE – NEW ROLE You are here © SAP 2009 / Page 9
  9. 9. COMPOSITE ROLES  Several roles can be merged in Composite Roles. In a Composite Role, you can rename and reorganize the menu.  Go to pfcg  Enter a name and click on  Enter the roles you want to merge (tab Roles)  Click Read menu  Click in order to change the menu Always re-read the menu, after you have changed a single role attached to a composite one . © SAP 2009 / Page 10
  10. 10. USERS  Enter user IDs  Execute User Comparison: The profile is not available in the user master record until the users have been compared.  Choose Complete Comparison © SAP 2009 / Page 11
  11. 11. USERS  Enter user IDs  Execute User Comparison: The profile is not available in the user master record until the users have been compared.  Choose Complete Comparison © SAP 2009 / Page 12
  12. 12. SORTING OF ROLES IN NWBC  In the Change mode of a role choose Menu Options.  Maintain the Sorting field or the Home Role flag if you want to set the role at the first position in NWBC  Without maintaining the sorting, the roles assigned to a user will be displayed in an arbitrary manner. However during a NWBC session they can be displaced with the mouse © SAP 2009 / Page 13
  13. 13. AGENDA © SAP 200/ Page 14 © SAP 2009 / Page 14
  14. 14. ADD A TRANSACTION TO A ROLE © SAP 2009 / Page 15
  15. 15. AUTHORIZATIONS (1)  Click Change Authorization Data  Define Organizations Levels, if necessary – use *, where possible © SAP 2009 / Page 16
  16. 16. Authorizations (2) When yellow traffic lights appear in the tree display, you must adjust the authorization values manually.  2 ways to adjust:  Click on the traffic light: Complete authorization (*) for all levels  Click on white fields: Values can be maintained individually Click Generate © SAP 2009 / Page 17
  17. 17. AGENDA © SAP 2009 / Page 18 © SAP 2009 / Page 18
  18. 18. BI XCELSIUS DASHBOARD © SAP 2009 / Page 19
  19. 19. BI CRYSTAL REPORT © SAP 2009 / Page 20
  20. 20. ADD BUSINESS OBJECTS XCELSIUS DASHBOARD OR CRYSTAL REPORT Enter URL for Xcelsius Dashboard Enter URL for Crystal Report © SAP 2009 / Page 21
  21. 21. ADD LONG URLS (1)  Use of URLs in PFCG is restricted to 255 characters  This URL has 459 characters: pagebuilder.IviewModeProxy? iview_id=pcd:portal_content/ s.employee_self_service/ eaverequest/ _password=welcome © SAP 2009 / Page 22
  22. 22. ADD LONG URLS (2)  Go to sm30  Enter SSM_VAR  Enter variables and the parts of the URL © SAP 2009 / Page 23
  23. 23. ADD LONG URLS (3)  Go to PFCG  Enter the role  Choose Other   Enter the tags as follows: <tokens> (and some rest of the URL, if necessary) © SAP 2009 / Page 24 Choose Web address
  24. 24. ADD ADOBE FORM (1)  Click Other   Enter URL - Documents are stored locally – check link – documents are shown according to link – as a folder structure or document is directly called © SAP 2009 / Page 25 Choose Web address
  25. 25. ADD ADOBE FORM (2)  Direct call of Adobe Form  Adobe Form in a Folder © SAP 2009 / Page 26
  26. 26. ADD POWERPOINT PRESENTATION (DIRECT METHOD)  Click Other  Choose Web address  Enter URL - Documents are stored locally – check link! C:Documents and Settingsd032256DesktopWorkshop US January 10th and 11thPPT Presentationroles.ppt © SAP 2009 / Page 27
  27. 27. ADD POWERPOINT PRESENTATION VIA PDF FILE (INDIRECT METHOD) Here’s an example of how you can integrate personalized demo process overview pages into your demo role in NWBC by converting a PPT slide into PDF and uploading it to the SAP system. NOTE: THIS REQUIRES THE NWBC DEMO KIT, or creation of your own Business Server Page. The NWBC DEMO KIT can be ordered here: 9E © SAP 2009 / Page 28
  28. 28. GAIN INSIGHT INTO IMPROVING MARGINS DAY-IN-THE-LIFE DEMONSTRATION Find Profitability Issue Compare Company Performance Analyze Product Profitability Define Actions for Solution 1) 2) 3) Use this PPT slide as template (without this orange text box). Personalize text, pictures, etc. CFO Convert slide into pdf (e.g. via PDFx-change 3.0, or any other conversion  Views the Income Statement and sees software)than expected profit lower 4) Upload PDF (see next slide)  Uses dashboards to compare performance with into MIME directory “Process Overview Graphic” profitability competitors and analyze product 5) Via your role call BSP Appl. Z_A1_ENH_2 and start page “menu_process_overview.htm” and pass file name (*.pdf) as parameter “graphic”  Decides to improve margins by discontinuing a product and reducing material costs (see next after next slide) Analyze Production Plan Adjust Production Plan Negotiate Purchase Price Update Purchase Price Operations Manager  Uses dashboards to adjust production plan for discontinued product  Models plan to minimize excess inventory and optimize plant utilization  Views details about material costs and supplier performance and uses for price renegotiation
  29. 29. 1) PERSONALIZATION OPTIONS DEMO PROCESS OVERVIEW PAGE (CONTINUED) After you have personalized it and converted it from PPT (see previous slide), upload your PDF file with the process overview graphic into the SAP MIME repository. 2) 3) 4) 5) If you have the NWBC Demo Kit (Candemo) go to transaction “se80”, select “Repository Browser”, select BSP Application “Z_A1_ENH_2”. Open the folder “Mimes” and right click the subfolder “Process_Overview_Graphics” and select “Import MIME Objects”. Select the personalized PDF file from your PC and confirm to upload. Now you can use this file in your role (see next slide).
  30. 30. PERSONALIZATION OPTIONS DEMO PROCESS OVERVIEW PAGE (CONTINUED) 6) After you have uploaded your personalized process flow *.pdf to the MIME repository (see previous slide), you can display it in the “Process Overview” page. 7) You can do so by passing the file name as the “graphic” parameter into the Process Overview page (menu_process_overview.htm) of your role. You configure this via transaction PFCG, tab “Menu”, select “Process_Overview” page, and click “change”. © SAP 2009 / Page 31
  31. 31. AGENDA © SAP 2009 / Page 32 © SAP 2009 / Page 32
  32. 32. ADD A POWER LIST      © SAP 2009 / Page 33 Click Other Choose Web Dynpro Application Enter Web Dynpro Application: POWL Choose APPLID Enter Value: ID of the POWER List
  33. 33. MAINTAIN OBN FOR POWLS  If a POWL calls a transaction via a button which is defined in the methods of the feeder class, the relevant transactions needs to be added to the role and the OBN targets need to be defined via Details for NetWeaver Business Client *  With a double-click on the inserted method in the Details for NetWeaver Business Client window you can define parameters and values which should be transferred to the transaction. Then the selection screen is skipped. ** * The menu entry is still called Additional Details in SAP ERP 6.0 EhP3 ** For Details of the OBN defining process see the slides and the guide for “How-to develop POWER Lists” also available in this Kit © SAP 2009 / Page 34
  34. 34. Where to find PowerLists and how to test them?  Go to Transaction powl_typer (other useful transactions are powl_query or powl_queryr)  You can find a list of the available PowerLists in EhP3 here: /documents/workspaces/91d8e9f9-1bfa-2910-e28ff3597248fc1f/NWBC/POWERLists/POWER_Lists_.XLS  PowerLists are sometimes described in the RKT material ( – but not in a specific All-in-One area, but in ERP, amongst the different applications, e.g.  Fast test: SAP Easy Access -> Favorites -> Add other objects -> WebDynpro Application  Even faster test: Adopt the following link by replacing the ID of the PowerList (KYK-FIN-FI-ASSETLIST) and adding the server information of an SAP ERP system: http://<server>.<domain>.<ext> :<portnumber>/sap/bc/webdynpro/sap/powl?APPLID=KYK-FINFI-ASSETLIST&sap-client=130&sap-language=EN © SAP 2009 / Page 35
  35. 35. Available POWL for NWBC  256 Total PowerLists (POWLs) in EhP3 256 POWL “Shipped with ERP 6.0 EhP 3” 123 POWL “Work Out of the Box” 55 POWL with NO Action Buttons © SAP 2009 / Page 36 68 POWL with One or More Action Buttons 133 POWL “Require Additional Configuration”
  36. 36. Available POWL for NWBC 55 POWL with NO Action Buttons /KYK/ISQ_13127_N Sales Order Selection /KYK/ISQ_RFDSL Customer Balances (Local Currency) /KYK/ISQ_MCTA Customer Analysis /KYK/ISQ_APRE_1 Open Invoices by Vendor /KYK/ISQ_MCTE Sales Organization Analysis /KYK/ISQ_RFKOPR00 Vendor Overdue Items /KYK/ISQ_CS11 Bill of Materials /KYK/ISQ_RFKSL Vendor Balances (Local Currency) /KYK/ISQ_CS12 Multilevel Bill of Materials /KYK/ISQ_12284 Financial Statements ? /KYK/ISQ_CS15 Material Where-Used List /KYK/ISQ_FIGL_I1 GL Account Open Line Items /KYK/ISQ_MCE1 Purchasing Group Analysis /KYK/ISQ_FIGL_I2 GL Account Cleared Line Items /KYK/ISQ_ME06 Material Source List Analysis /KYK/ISQ_STAX Use and Sales Taxes (US) /KYK/ISQ_ME0M Source List by Material /KYK/ISQ_COPC_LST Cost Center Activity ? /KYK/ISQ_ME1P Purchase Order Price History /KYK/ISQ_COS019 Internal Orders Budget / Actual / Commitment /KYK/ISQ_ME2M Purchasing Documents for Material /KYK/ISQ_COS4 Internal Orders Actual / Plan / Variance /KYK/ISQ_ME3LN Purchasing Documents for Vendor /KYK/ISQ_COS633 Cost Center Actual/Plan/Variance/Previous Year /KYK/ISQ_ME4N Purchasing Documents for Document Number /KYK/ISQ_COS_3 Cost Center Actual/Plan/Variance /KYK/ISQ_ME4S_N RFQs per Collective Number /KYK/ISQ_KHOE1 Summarized Costs Target/Actual /KYK/ISQ_ME5A_N Display Purchase Requisitions /KYK/ISQ_KHOE2 Summarized Costs Work in Progress /KYK/ISQ_ME6H Vendor Evaluation Analysis /KYK/ISQ_KHOE3 Summarized Costs Planned/Actual /KYK/ISQ_ME80FN Purchasing General Evaluation /KYK/ISQ_KSBT_N Cost Centers: Planned Activity Prices /KYK/ISQ_ME81N Purchase Order Value Analysis KYKQ-ISQ_KKBC0 Target/Actual - Comparison /KYK/ISQ_RFKUM Vendor Purchase Analysis KYKQ-ISQ_KKBC1 Order Cost Analysis (Trend) /KYK/ISQ_MB52 Warehouse Stocks of Material KYKQ-ISQ_KKBC2 Order Cost Analysis (WIP) /KYK/ISQ_MBLB_N Stocks at Subcontractor KYKQ-ISQ_RKKBCAL2_1 Costing Run Results /KYK/ISQ_MBSM Cancelled Material Documents KYKQ-ISQ_RKKBCAL2_2 Costing Run Results (Price vs Results) /KYK/ISQ_MCE5 Material Group Analysis KYKQ-ISQ_S_ALR13142 Product Cost Analysis (Target / Actual) /KYK/ISQ_MCTC Material Analysis KYKQ-ISQ_S_ALR13148 Product Cost Analysis (Variance Categories) /KYK/ISQ_12175 Customer Invoice Due Date Forecast KYKQ-ISQ_S_ALR13151 Product Cost Analysis (Work in Progress) /KYK/ISQ_ARRE_1 Open Invoices by Customer KYKQ-ISQ_S_ALR13157 Product Cost Analysis (Actual Data) /KYK/ISQ_FDK43 Credit Management Master List KYKOP-OPS-PP-DIS-MAT-CHANGES Material Changes /KYK/ISQ_RFDOPR10 Customer Overdue Items © SAP 2009 / Page 37
  37. 37. Available POWL for NWBC 68 POWL with One or More Action Buttons /KYK/ISQ_CR05 Production Work Center List KYKOP-FIN-CO-COSTELEMENT Cost Elements /KYK/ISQ_MM60 Materials List KYKOP-FIN-CO-COST-ESTIMATES /KYK/ISQ_MM60_PRD_N Product Groups POWL for Determining Cost Estimate for Materials FAGL_CLOCO Task Lists in Closing Cockpit KYKOP-FIN-CO-INTORDER Internal Orders FIN_FSCM_BNK_PMNT Payment Monitor KYKOP-FIN-FI-ASSETLIST Assets FIN_FSCM_BNK_STMT Bank Statement Monitor KYKOP-FIN-FI-CHECK_REGISTER Check Register FIN_FSCM_CR_ACCOUNT Customers KYKOP-FIN-FI-CUSTOMERITEMS Customer Line Items FIN_FSCM_CR_BOL Blocked Sales Orders KYKOP-FIN-FI-CUSTOMERITEMS_R FIN_FSCM_CR_CASE Credit Limit Requests Customer Line Items (Display Only) FIN_FSCM_DM Dispute Management KYKOP-FIN-FI-GL_ACC_LIST GL Accounts FITV-POWL-TRIPSFORAPPROVAL Expense Reports for Approval KYKOP-FIN-FI-RECU_ENTRY_DOC Recurring Entry Documents KYK-FIN-FI-GLITEMS POWL G/L Account Line Items KYKOP-FIN-FI-VENDORITEMS Vendor Line Items KYKOP-CO-MAT-COSTING Material Costing Runs KYKOP-CRC-LIST-CUSTOMERS Customer Credit Management KYKOP-FIN-FI-VENDORITEMS_R Vendor Line Items (Display Only) KYKOP-FIN-CO-ACTTYPE Activity Type KYKOP-FIN-CO-ASSESSMENT-CYCLE Assessment Cycles KYKOP-FIN-CO-COSTCENTER Cost Centers Vendors (A/P) KYKOP-FIN-FI-VENDORLIST_AP_PAY Vendors (A/P) for Payment KYKOP-OPS-FI-CUSTOMERS Customers KYKOP-OPS-FI-PO-W Purchase Orders (Display Only) KYKOP-OPS-LE-DELIVERIES Sales Orders Due for Delivery KYKOP-OPS-LE-QUOTATIONS © SAP 2009 / Page 38 KYKOP-FIN-FI-VENDORLIST_AP Sales Quotations
  38. 38. Agenda © SAP 2009 / Page 39 © SAP 2009 / Page 39
  39. 39. MS OUTLOOK © SAP 2009 / Page 40
  40. 40. ADD MS OUTLOOK (1) If not yet existing, create a BSP 1. 2. 3. Transaction SE80, select "BSP Application", and create a new BSP Application, eg. Z_AIO_ADD_ON Create a new BSP, eg. outlook.htm. Copy the following coding into the BSP <html> <head> <meta http-equiv="Content-Language" content="en-us"> <script type="text/vbscript"> <!-- Dim folder_1 Dim folder_2 Dim folder_display folder_1 = "Inbox" folder_2 = "Calendar" folder_display = folder_1 Sub Window_OnLoad() call btnSwitchView_onclick End Sub Sub btnSwitchView_onclick() ViewCtlFolder.Folder = folder_display if folder_display = folder_2 then     folder_display = folder_1 else     folder_display = folder_2 © SAP 2009 / Page 41
  41. 41. ADD MS OUTLOOK (2) end if switchbutton.Value = "Show " & folder_display & " View" End Sub Sub btnNewMessage_onclick   ViewCtlFolder.NewMessage() End Sub --> </script> <title>Outlook View Control View Issue Demo</title> <meta name="Microsoft Border" content="none, default"> </head> <BODY BGCOLOR="#C0D6EA" TEXT="#000000" LINK="#0000EE" ALINK="#EE0000" VLINK="#551A8B"> <p><input id="switchbutton" type="button" value="Switch View" name="btnSwitchView">&nbsp; <input type="button" value="Create Message" name="btnNewMessage"><p> <OBJECT classid=CLSID:0006F063-0000-0000-C000-000000000046 id=ViewCtlFolder width="100%" height="430" border="1" Codebase=",0,0,3024">> <param name="Namespace" value="MAPI"> <param name="Folder" value=folder> <param name="View" value="Day/Week/Month View With AutoPreview" <param name="Restriction" value=""> <param name="DeferUpdate" value="0"></OBJECT> </body> </html> 4. Activate the BSP © SAP 2009 / Page 42
  42. 42. ADD MS OUTLOOK (3) Add the BSP to your demo role 1. 2. 3. Transaction PFCG Select or create the role Add BSP application (eg. Z_AIO_ADD_ON) as "others/BSP Application" (see screen shot with example below): © SAP 2009 / Page 43
  43. 43. AGENDA © SAP 2009 / Page 44 © SAP 2009 / Page 44
  44. 44. HOMEPAGE © SAP 2009 / Page 45
  45. 45. ADD A HOMEPAGE TO A ROLE  Click Other (example with URL)  Enter URL  Right-click on the new entry.  Go to Details for NetWeaver Business Client. Choose Homepage © SAP 2009 / Page 46  Choose Web  address
  46. 46. © 2010 SAP AG. ALL RIGHTS RESERVED. No par t of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG. The informa tion contained herein may be changed without prior notice.  Some sof tware products marketed by SAP AG and its distributors contain proprietar y sof tware components of other software vendors.  Microsof t, Windows, Excel, Outlook, and PowerPoint are registered trademarks of Microsof t Corporation.  I BM, DB2, DB2 Universal Database, System i, System i5, System p, System p5, System x, System z, System z10, System z9, z10, z9, iSeries, pSeries, xSeries, zSeries, eSer ver, z/VM, z/OS, i5/OS, S/390, OS/390, OS/400, AS/400, S/390 Parallel Enterprise Ser ver, PowerVM, Power Architecture, POWER 6+, POWER6, POWER5+, POWER5, POWER, OpenPower, PowerPC, BatchPipes, BladeCenter, System Stora ge, GPFS, HACMP, RETAIN, DB2 Connect, R ACF, Redbooks, OS/2, Parallel Sysplex, MVS/ESA, AIX, Intelligent Miner, WebSphere, Netfinity, Tivoli a nd Informix are trademarks or registered trademarks of IBM Corporation.  Linux is the registered trademark of Linus Tor valds in the U.S. and other countries.  Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks or registered trademarks of Adobe Systems Incorporated in the United Sta tes a nd/or other countries.  Oracle is a registered trademark of Oracle Corporation.  UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group. Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are trademarks or registered trademarks of Citrix Systems, Inc.  HTML, XML, XHTML a nd W3C are trademarks or registered trademarks of W3C®, World Wide Web Consor tium, Massachusetts Institute of Technology.  Java is a registered tra dema rk of Sun Microsystems, Inc.  JavaScript is a registered trademark of Sun Microsystems, Inc., used under license for technology invented and implemented by Netscape.  SAP, R/3, SAP NetWeaver, Duet, Par tnerEdge, ByDesign, Clear Enterprise, SAP BusinessObjects Explorer, and other SAP products and ser vices mentioned herein as well as their respective logos are tra demarks or registered trademarks of SAP AG in Germany and other countries.  Business Objects a nd the Business Objects logo, BusinessObjects, Cr ystal Repor ts, Cr ystal Decisions, Web Intelligence, Xcelsius, and other Business Objects products and ser vices mentioned herein as well a s their respective logos are trademarks or registered trademarks of SAP France in the United States and in other countries.  All other product and ser vice names mentioned are the trademarks of their respective companies. Data contained in this document ser ves informational purposes only. Nationa l product specifications may var y.  The informa tion in this document is proprietar y to SAP. No par t of this document may be reproduced, copied, or transmitted in any form or for any purpose without the express prior written permission of SAP AG.  This document is a preliminar y version and not subject to your license agreement or any other agreement with SAP. This document contains only intended strategies, developments, a nd functionalities of the SAP® product and is not intended to be binding upon SAP to any par ticular course of business, product strategy, and/or development. Please note that this document is subject to change and may be changed by SAP at any time without notice.  SAP assumes no responsibility for errors or omissions in this document. SAP does not warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a pa r ticular purpose, or non-infringement. SAP shall have no liability for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. This limita tion sha ll not apply in cases of intent or gross negligence.  The statutor y liability for personal injur y and defective products is not af fected. SAP has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third-par ty Web pages nor provide any warranty whatsoever relating to third-par ty Web pages.