P. 1
ITSM Guide Roles Final

ITSM Guide Roles Final

|Views: 489|Likes:
Published by Aashish Rai

More info:

Published by: Aashish Rai on Apr 19, 2012
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

11/05/2013

pdf

text

original

Business & Authorization Roles

Applicable Releases: SAP Solution Manager 7.1 SPS 01

SAP Solution Manager Scenarios: Incident Management Change Request Management

Version 1.0 May 2011

© Copyright 2011 SAP AG. All rights reserved. No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG. The information contained herein may be changed without prior notice. Some software products marketed by SAP AG and its distributors contain proprietary software components of other software vendors. Microsoft, Windows, Outlook, and PowerPoint are registered trademarks of Microsoft Corporation. IBM, DB2, DB2 Universal Database, OS/2, Parallel Sysplex, MVS/ESA, AIX, S/390, AS/400, OS/390, OS/400, iSeries, pSeries, xSeries, zSeries, z/OS, AFP, Intelligent Miner, WebSphere, Netfinity, Tivoli, Informix, i5/OS, POWER, POWER5, OpenPower and PowerPC are trademarks or registered trademarks of IBM Corporation. Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks or registered trademarks of Adobe Systems Incorporated in the United States and/or other countries. Oracle is a registered trademark of Oracle Corporation. UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group. Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are trademarks or registered trademarks of Citrix Systems, Inc. HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C®, World Wide Web Consortium, Massachusetts Institute of Technology. Java is a registered trademark of Sun Microsystems, Inc. JavaScript is a registered trademark of Sun Microsystems, Inc., used under license for technology invented and implemented by Netscape. MaxDB is a trademark of MySQL AB, Sweden. SAP, R/3, mySAP, mySAP.com, xApps, xApp, SAP NetWeaver, and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and in several other countries all over the world. All other product and service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary.

These materials are subject to change without notice. These materials are provided by SAP AG and its affiliated companies ("SAP Group") for informational purposes only, without representation or warranty of any kind, and SAP Group shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP Group products and services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional warranty. These materials are provided “as is” without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. SAP shall not be liable for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. SAP does not warrant the accuracy or completeness of the information, text, graphics, links or other items contained within these materials. SAP has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third party web pages nor provide any warranty whatsoever relating to third party web pages. SAP NetWeaver “How-to” Guides are intended to simplify the product implementation. While specific product features and procedures typically are explained in a practical business context, it is not implied that those features and procedures are the only approach in solving a specific business problem using SAP NetWeaver. Should you wish to receive additional information, clarification or support, please refer to SAP Consulting. Any software coding and/or code lines / strings (“Code”) included in this documentation are only examples and are not intended to be used in a productive system environment. The Code is only intended better explain and visualize the syntax and phrasing rules of certain coding. SAP does not warrant the correctness and completeness of the Code given herein, and SAP shall not be liable for errors or damages caused by the usage of the Code, except if such damages were caused by SAP intentionally or grossly negligent. Disclaimer Some components of this product are based on Java™. Any code change in these components may cause unpredictable and severe malfunctions and is therefore expressively prohibited, as is any decompilation of these components. Any Java™ Source Code delivered with this product is only to be used by SAP’s Support Services and may not be modified or altered in any way.

Document History
Document Version 1.00 Description First official release of this guide

menu paths. source text. F2 or ENTER. Cross-references to other documentation Example text Emphasized words or phrases in body text. menu names. screen titles. and menu options. These include field names. These are words or characters that you enter in the system exactly as they appear in the documentation. User entry texts. for example. upgrade and database tools. graphic titles. names of variables and parameters.Typographic Conventions Type Style Example Text Description Words or characters quoted from the screen. and table titles File and directory names and their paths. pushbuttons labels. Angle brackets indicate that you replace these words and characters with appropriate entries to make entries in the system. Icons Icon Description Caution Note or Important Example Recommendation or Tip Example text Example text <Example text> EXAMPLE TEXT . Variable user entry. messages. Keys on the keyboard. and names of installation.

........................................................2 4...............................1 5................................................................................................................................... 3......... 21 5.................. 26 Assign Users to an Authorization Role .......6 4...................................2 5.1................................................................................ 25 Copy a Single Authorization Role .........................2 6..............................3................................. 25 6........................7 Define a Customer specific Business Role ............................. How to Adapt Authorization Roles ...............................................................................................................................................4 4........... Assign Business Role SOLMANPRO to System Users ................. 2................3 Assignment via Authorization Role ..................................... 3 How to Enable the Standard Authorization Concept . 5 3.... 16 Define a Layout Profile ................................1 3..............3 Business Role SOLMANPRO ................................. 25 6........................................................................ 1 Prerequisites ............... 21 Assignment via User Parameter ............................................3............. 1 3...........1 Copy an Authorization Role ............ 25 Adapt an Authorization Profile ...............................1 6... 10 Create a Role Configuration Key .................5 4...1 Visibility of Customer specific Navigation Bar Links .................2 4................................................................................................................................ 2 Standard Authorization Roles ....................... 20 5................................................... General Information........................................................... 18 Assign an Authorization Role ........................ 9 4.............................................................................. 12 Create a Navigation Bar Profile ........................................ How to Assign Users to a Business Role ..............................................................Table of Contents 1..............2 3................................. 1 Overview of SAP Standard Roles .... 21 Organizational Assignment ....... 26 ........................................................................................ 19 Assign a Function Profile ........ 6 How to Adapt a Business Role .....................................................................................................................3 4...............1...............1 4...........2 6...........................................3 Copy a Composite Authorization Role ..... 17 Create a Technical Profile ...............................3................................................................................................................................ 5 Authorization Roles Set-up ....................................1 3......................................... 14 4...................... 24 6.................................

SAP recommends copying the business role SOLMANPRO and the authorization roles into the customer naming space which must begin with Z or Y. This will ensure that changes will not be overwritten in case of an upgrade. The business role SOLMANPRO and the authorization roles are only intended to be used as a template for Best Practices scope. screens. 2. June 2011 1 . set of functionalities and authorizations. Using different business roles enables you to tailor the system for its users individually in terms of profiles.How to Adapt Business & Authorization Roles 1.1 SPS 01 For more information. General Information To set up the SAP WebClient for your system users you need business roles and authorization roles.CRM Web UI: Mandatory SICF services for CRM framework 1144511: System parameters required for CRM WebClient 1244321: Activation of detailed CRM WebClient error analysis during the development phase 824554: ICM timeout errors SAP Solution Manager admin user 3. This guide provides information on how to set up authorization roles and business roles for the different users of the SAP WebClient.  Prerequisites installed and running Solution Manager 7.  the following SAP Notes are relevant for the preparation of the SAP WebClient usage o o o o  1115493 . The roles have to be validated and adapted to the specific customer requirements. please see the SAP Solution Manager Installation Guide available in SAP Service Marketplace. Overview of SAP Standard Roles This chapter provides an overview on the relevant SAP standard roles required for the configuration of the SAP WebClient and the set-up of an authorization concept.

Direct link group is part of the navigation bar and provides direct access to specific business content with one click. June 2011 2 .1 Business Role SOLMANPRO Use the business role SOLMANPRO to control the navigation bar and logical links in the SAP WebClient. A work center describes and provides access to business content. The work center page is a collection of logical links for business content which are organized in link groups. Logical links can be used in direct link groups. second level navigation or on work center pages. Via this role you can define the structure of the navigation bar and which links are available on the Work Center pages and the Direct Link group. The figure below provides an overview of the previously described elements of the SAP WebClient screen.How to Adapt Business & Authorization Roles 3.

Via authorization roles you protect the SAP system against unauthorized access at database. network and frontend level.How to Adapt Business & Authorization Roles 3.2 Standard Authorization Roles Authorization roles (also called PFCG roles) are used to implement a comprehensive security concept. Following composite roles are relevant for the Incident Management scenario:    SAP_SUPPDESK_ADMIN_COMP: contains single roles relevant for Service Desk administrators SAP_SUPPDESK_PROCESS_COMP: contains single roles relevant for Service Desk processors SAP_SUPPDESK_CREATE_COMP: contains single roles relevant for Service Desk key users Copy the roles into your customer namespace: This step has to be performed for all necessary Composite Roles! It is recommended to Check if the Authorizations inside this Composite Roles were performed correctly (Green Status) June 2011 3 .

How to Adapt Business & Authorization Roles Double-click on the Role you want to check In this Case (yellow flag) the Authorizations were not performed correctly  Generate Authorizations June 2011 4 .

3. 3. This means that users who are assigned to this authorization role will also have SOLMANPRO assigned. Enter the role name in the corresponding field and choose Change. The role SOLMANPRO is assigned to the PFCG role SAP_SM_CRM_UIU_SOLMANPRO. If you need to adapt the roles to your business requirements. 4.3. 3. you should copy them into the customer naming space to ensure that changes will not be overwritten during upgrade. as shown in the next figure. please refer to SAP Note 1436270. In this case. 2. please proceed as described in chapter 4 and 6. Go to the tab User.How to Adapt Business & Authorization Roles Check ALL THE STEPS for ALL SINGLE ROLES of ALL COMPOSITE ROLES! For a detailed description of the Incident Management authorizations roles. June 2011 5 . For more information on authorizations and authorization objects.3 How to Enable the Standard Authorization Concept This chapter provides information on how to enable the standard authorization concept in case that you are going to use the standard and do not intend to change it. Copy the Role into customer Namespace as explained on Page 3-4 before and assign it to the SOLMANPROUser. Enter the user ID in the table User Assignments. To assign the role SAP_SM_CRM_UIU_SOLMANPRO to system users.1 Assign Business Role SOLMANPRO to System Users SAP Solution Manager Users need the business role SOLMANPRO to get access to the SAP WebClient and be able to use it. please refer to the Security Guide for SAP Solution Manager. Start transaction PFCG. please do the following: 1. This guide is available in SAP Service Marketplace.

g. It provides step-by-step instructions on how to set-up the standard composite role SAP_SUPPDESK_PROCESS_COMP which contains authorizations for the Service Desk Message Processor. To do this. In the new window. 4.2. Do a double click to access a role (e. Choose Generate to create the authorization profile of the role. for example. Save your settings. 7. Start transaction PFCG. 3. Enter the role name SAP_SUPPDESK_PROCESS_COMP in the corresponding field and choose Change. 5. you have to generate the authorization profiles of the single roles contained in the composite role SAP_SUPPDESK_PROCESS_COMP. as shown in the figure below. 3. 2. 1. June 2011 6 . Go to the tab Authorizations and choose Change Authorization Data. as shown in the next figure. Go to the tab Roles where all single roles are listed.How to Adapt Business & Authorization Roles You can include several users at the same time. choose Display <-> Change to switch to Edit mode. first choose Selection and then additional value selection pushbuttons. The role will be open in a new session.2 Authorization Roles Set-up This section explains how to configure a standard authorization role by an example. 5. 3. SAP_SMWORK_BASIC_INCIDENT).1 Generate Authorization Profiles In this step.3.3. all users in a particular user group or all users in the SAP System. 6. Copy this role also into customer namespace before you perform the next steps! You do not need to perform the following instructions for the roles SAP_SMWORK_INCIDENT_MAN and SAP_SM_CRM_UIU_SOLMANPRO as they do not contain any active authorization objects.

2. 5. Enter the user ID in the table User Assignments. all users in a particular user group or all users in the SAP System. 4. Be careful the Role is already in your customer namespace! 1.2 Assign Users In this step. 3. Start transaction PFCG. Save your settings. Choose the Back button and afterwards save your settings. After you copied the Composite Role into customer namespace and generated the different Single Roles your Composite Role SAP_SUPPDESK_PROCESS_COMP should look like this: 3.How to Adapt Business & Authorization Roles 8. you assign User to the composite role. Repeat steps 4-8 for the rest of the roles contained in the composite role.2. To do this. Enter the role name (SAP_SUPPDESK_PROCESS_COMP) in the corresponding field and choose Change. You can include several users at the same time. 9.3. for example. first choose Selection and then additional value selection pushbuttons. Go to the tab User. June 2011 7 .

3 Execute User Comparison After you have assigned system users to the composite role. In the composite role definition.How to Adapt Business & Authorization Roles 3. 2.3. as shown in the figure below. June 2011 8 . you must execute user comparison.2. Please do the following: 1. go to the tab User. Choose User comparison to compare the user master record.

links that appear in the navigation bar or used reporting framework (SAP BI or Interactive Reporting).g. How to Adapt a Business Role This chapter explains how to adapt a business role according to your business requirements. A business role has the following profiles assigned:   Navigation Bar Profile o Assignment of work centers. which includes header and footer area. e. add/move/rename field) by using the UI configuration tool A PFCG Role ID is used to assign users to the business role. June 2011 9    . direct link groups and logical links Layout Profile o Layout of the navigation frame. e. work center link groups.g. Role Configuration Key o Assignment of adapted UI views (e.g. disable the support of the browser's Back button or frame swapping (reduce noticeable screen flickering) Function Profile o Assignment of additional functional areas.How to Adapt Business & Authorization Roles 4. work area and navigation bar Technical Profile o Assignment of specific technical settings. The next figure provides an overview on the profiles assigned to a business role.

June 2011 10 . You should copy them into the customer naming space which must begin with Z or Y. Start transaction SPRO and go to IMG activity Define Business Role.How to Adapt Business & Authorization Roles SAP recommends you to use the business role SOLMANPRO and its profiles as templates for your new business role. 4. 2. The recommended name for the new business role is ZSOLMANPRO. as shown in the figure below. Highlight the business role SOLMANPRO and choose Copy As….1 Define a Customer specific Business Role Use the standard business role SOLMANPRO as template to define the new business role: 1.

So you have to create a new Customizing Request.How to Adapt Business & Authorization Roles 3. 5. The new business role ZSOLMANPRO should look like this: After confirmation via SAVE a Prompt for Customizing Request appears. Now it is possible to create the Customizing Request ! June 2011 11 . Save your settings. Make sure that Extended Transport Control Parameter (CTC) = 1 is set in the TMS! For this go to Transaction STMS  Overview  Systems  Select System  Transport Tool Tab  Add Parameter CTC =1. 4. 6. Choose copy as. Enter the new Busines role Name ZSOLMANPRO ENTER.

June 2011 12 . Thus. will see the configuration changes in the SAP WebClient. To create a role configuration key. you have to copy and adapt the profiles/keys.. a view can be configured for a specific configuration key. the role configuration key provides the possibility of a role-dependent view configuration. Start transaction SPRO and go to IMG activity Define Role Configuration Key as shown below. This role configuration key is also assigned to the business role to identify the configuration that is to be used for this role. Certain changes can be stored under a role configuration key.How to Adapt Business & Authorization Roles Create a Customizing Request Enter a Short Description for the newly created Customizing Request and confirm 2 times After you copied the role SOLMANPRO. For all other users no changes will be visible.2 Create a Role Configuration Key . where fields are removed or renamed compared to the original. So only those users with business roles assigned. as described in the next sections of this chapter: 4.. The role configuration key is a unique identifier used in the configuration of views for the SAP WebClient. which carries the right key. For instance. please do the following: 1.

Add a new role configuration key.g. as shown below. You can do this in the IMG activity Define Business Role as shown below. Choose New Entries. After you created the new role configuration key. Save your settings. June 2011 13 . 3.How to Adapt Business & Authorization Roles 2. ZSOLMANPRO. you must assign it to the business role which you have defined before. e. 4.

June 2011 14 . work center link groups and direct link groups. Start transaction SPRO and go to IMG activity Define Navigation Bar Profile.3 Create a Navigation Bar Profile A navigation bar profile is a collection of logical links. Use the standard navigation bar profile SOLMANPRO as template to define the structure of your navigation bar: 1.How to Adapt Business & Authorization Roles Save your new Settings! 4. work centers.

g. The column Inactive controls the visibility of a work center. Furthermore. Confirm with ENTER. It is possible to add the Workcenters via the Option “New Entries”  Assign Workcenters  Save Work centers can be activated or deactivated within a business role via the IMG activity Define Business Role. Choose Assign Work Centers To Navigation Bar Profile to specify which work centers should be part of the navigation bar (e. June 2011 15 . 3. you get access to the shared lists of all logical links. Highlight the navigation bar profile SOLMANPRO and choose Copy As… (recommended name for the new navigation profile is ZSOLMANPRO). In the IMG activity Define Navigation Bar Profile. you can define navigation bar specific customizing. such as assignment of work centers and direct link groups. as shown in the example below. Now you are able to adapt your navigation bar profile. Highlight your business role (e. Save your settings. ZSOLMANPRO) and choose Adjust Work Centers.How to Adapt Business & Authorization Roles 2. work centers. ZSOLMANPRO). work center link groups and direct link groups.g.

3. navigate through the structure Define Business Role  June 2011 16 . Direct link groups and direct links can be set to visible or invisible within a business role via the IMG activity Define Business Role.How to Adapt Business & Authorization Roles Choose Assign Direct Link Groups To Nav. Therefore. please refer to the documentation of the IMG activity Define Navigation Bar Profile. After you created the new navigation bar profile. as shown in the example below. In this example the direct link group SM-CREATE is assigned to the navigation bar profile ZSOLMANPRO.g. For more information on navigation bar customizing. Highlight your business role (e. 4. you must assign it to the business role which you have defined before. Bar Profile to specify which work centers should be part of the navigation bar. ZSOLMANPRO) and choose Adjust Direct Link Groups to define which direct link groups should be visible or choose Adjust Direct Links to specify which direct links should be visible within a direct link group.1 Visibility of Customer specific Navigation Bar Links Once you copied the standard Navigation Bar Profile you must activate the links specifically within the customizing of the Business Role. You can do this in the IMG activity Define Business Role.

How to Adapt Business & Authorization Roles Adjust Direct Link Groups  Adjust Direct Links. The example below shows customer specific customizing according to direct links shown in the CRM WEB UI.g. Direct Links shown in the CRM WEB UI: Save the Changes! 4. SM-Create) for which you want to adjust the Direct Links). Afterwards you have to double-click on the Entry Adjust Direct Links.4 Define a Layout Profile June 2011 17 . It is necessary to select the Group (e. The column Visible controls the links displayed in the CRM WEB UI.

June 2011 18 . 2. Now you are ready to adapt the layout profile according to your business needs. 4. Start transaction SPRO and go to IMG activity Define Technical Profile as shown below. Choose copy all.5 Create a Technical Profile Use the standard technical profile DEFAULT_SOLMAN as template to define your custom technical profile: 1.How to Adapt Business & Authorization Roles Use the standard layout profile CRM_UIU_MASTER as template to define the layout of the header and footer area. Highlight the layout profile CRM_UIU_MASTER and choose Copy As…. work area and navigation bar: 1. After you created the new layout profile. You can do this in the IMG activity Define Business Role. 4. Save your settings. Confirm with Enter! 3. For more information. Start transaction SPRO and go to IMG activity Define Layout Profile as shown below.(recommended name for the new layout profile is ZCRM_UIU_MASTER). you must assign it to the business role which you have defined before. please refer to the documentation of the IMG activity Define Layout Profile.

How to Adapt Business & Authorization Roles 2. Confirm with Enter! 3.<--. Highlight the technical profile DEFAULT_SOLMANPRO and choose Copy As…. For more information. 4.(recommended name for the new layout profile is ZDEFAULT_SOLMANPRO). you must assign it to the business role which you have defined before.There was no pissiblity to select copy entry/copy all 4. After you created the new technical profile. Now you are ready to adapt the technical profile according to your business needs. You can do this in the IMG activity Define Business Role. SAP recommends you to copy the role SAP_SM_CRM_UIU_SOLMANPRO into the customer naming space which must begin with Z or Y.2. Save your settings. please refer to chapter 6 of this guide or already explained in Chapter 3. The recommended name for the new authorization role is ZSAP_SM_CRM_UIU_SOLMANPRO. the business role SOLMANPRO is assigned to the authorization role SAP_SM_CRM_UIU_SOLMANPRO. June 2011 19 . As default. please refer to the documentation of the IMG activity Define Technical Profile. For more information on how to copy an authorization role.6 Assign an Authorization Role The authorization role is used to assign users to the business role. Choose copy all.

For detailed information on how to create a function profile. please refer to the documentation of the IMG activity Define Function Profile.7 Assign a Function Profile Function Profiles define special functions. you must assign it to the business role which you have definedbefore. 4. or the working context. After completing all steps from chapter 4. the new business role ZSOLMANPRO should look like this: June 2011 20 .How to Adapt Business & Authorization Roles After you created the new authorization role. please refer to the documentation of the IMG activity Define Business Role. You can do this in the IMG activity Define Business Role. For more information on how to assign function profiles to business roles. such as the level of personalization. Via the IMG activity Define Business Role you can assign function profiles to your business role.

Users who are assigned to such an authorization role have also the business role assigned. please refer to section 4. SAP recommends you to use an authorization role to assign users to a business role. via an organizational model or a user parameter. For more information on how to assign an authorization role to a business role. For more information on how to assign users to authorization roles.3 of this guide. You can assign users to a business role by using a PFCG role. that each user who has this role assigned is also assigned to the business role SOLMANPRO. 5.6 of this guide.2 Organizational Assignment Users can be assigned to a business role via the organizational model. please refer to section 6. 5.1 Assignment via Authorization Role A business role is assigned to an authorization role. The business role is assigned to an organizational unit or a position in the organizational model and the user/business partner is assigned to a position in the organizational unit. This means. How to Assign Users to a Business Role This chapter provides information on how to assign users to business roles. as shown in the figure below. June 2011 21 .How to Adapt Business & Authorization Roles 5. For example: The standard business role SOLMANPRO is assigned to the PFCG role SAP_SM_CRM_UIU_SOLMANPRO.

3. please do the following: 1. To assign a business role to an organizational unit. Navigate to the corresponding organizational unit via the option Structure Search or Search Team. From the menu. In the Active tab. as shown in the next figure. select Business role from the list and choose Create infotype. please refer to the guide Support Team Determination via Business Rule Framework plus (BRFplus) available in SAP Service Marketplace.How to Adapt Business & Authorization Roles For more information on how to create and adapt an organizational model. select Goto -> Detail object -> Enhanced object description 4. 2. June 2011 22 . as shown in the figure below. Start transaction PPOMA_CRM.

please do the following: 1. Save your settings. To assign a business role to a position in the organizational model. If you assign a business role to an organization unit which includes other units. then all users from these lower units will also have the business role assigned to. ZSOLMANPRO. Enter the business role in the corresponding field. e.g. as shown in the figure below. Start transaction PPOMA_CRM.How to Adapt Business & Authorization Roles 5. June 2011 23 . 6.

Each Position can have exactly one business role assigned to. 5. the assignment within the organizational model will not be taken into account. e. Navigate to the corresponding position via the option Structure Search or Search Team. Proceed with steps 3-6 on how to assign a business role to an organizational unit.3 Assignment via User Parameter A business role can be assigned directly to a system user.: In this case.g. June 2011 24 . 3.How to Adapt Business & Authorization Roles 2. In the user maintenance (transaction SU01) assign Parameter ID CRM_UI_PROFILE with Parameter Value <Business Role Key> on the Parameters tab to the user.

Enter the role name (e.1.g. SAP_SUPPDESK_PROCESS_COMP) in the corresponding field. 4. please do the following: 1. as shown in the next figure.g.2 Copy a Single Authorization Role 1. 7. 6. Enter a name for the new role. Start transaction PFCG. Start transaction PFCG. e. Enter the role name (e. Choose Yes in the Query dialog box to copy also the single roles contained in the composite role.1 Copy a Composite Authorization Role To copy a composite authorization role. June 2011 25 . 3.g. 2. 6. 3. Enter target names for the copied single roles. How to Adapt Authorization Roles 6. SAP_SUPPDESK_PROCESS) in the corresponding field.How to Adapt Business & Authorization Roles 6.1. Choose Copy role. 5.1 Copy an Authorization Role This section provides information on how to copy composite or single authorization roles. Choose Copy role. as shown in the next figure. ZSAP_SUPPDESK_PROCESS_COMP. 6. 2. Choose Copy All.

The following example shows how to adapt the authorization profile of the role ZSAP_SUPPDESK_PROCESS to allow users to create/change/display the business transaction type ZMIN (copy of SMIN): 1. Choose Copy All. Choose Generate to create the authorization profile. e.g. 4. You get a list of all authorization objects which are included in the role. Choose Back and afterwards save your settings. June 2011 26 .g. 6. e. 7. Navigate to the authorization object CRM Order – Business Transaction Type (technical name CRM_ORD_PR) and choose Change for the field Business Transaction type. ZSAP_SUPPDESK_PROCESS in the corresponding field and choose Change. e.2 Adapt an Authorization Profile Role profiles contain authorization objects to specify user authorizations. Go to the tab Authorizations and choose Change Authorization Data. 5.How to Adapt Business & Authorization Roles 4. as shown in the figure below. 3. Start transaction PFCG. Start transaction PFCG. 2. Enter a name for the new role. such as change/display authorization for texts or transaction types. Enter the role name. Enter the role name. 6. ZSAP_SUPPDESK_PROCESS. Enter the value ZMIN in the dialog box and proceed with Transfer (Enter). 5. you have to assign system users to the role and execute user comparison: 1. ZSAP_SUPPDESK_PROCESS in the corresponding field and choose Change.g. 2.3 Assign Users to an Authorization Role After you generated the authorization profile. 6. 8.

Enter the user ID(s) in the table User Assignments. Save your settings. June 2011 27 . 5. 4. 6. Choose User comparison.How to Adapt Business & Authorization Roles 3. Go to the tab User.

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->