SAP Authorizations Permission implementation - SAP Corner

Direkt zum Seiteninhalt
Permission implementation
In-house role maintenance
You must enable a role that you have created as a Design-Time object in the Design Time Repository before it can be associated with a user. To do this, use Project Explorer to select the role you want to enable and select Team > Activate from the shortcut menu. This will create a runtime object of this selected SAP HANA role. This object is also understood as a catalogue object and is incorporated in the Roles branch in the corresponding SAP HANA system.

The simulation of the mixing process is delivered with SAP Note 1941325. When you call step 2c, you will get a list of all the roles with the information about whether the respective role is already mixed (green light) or still needs to be mixed (red light). Highlight a role in this list. Use the Mix button to get the simulation of the mixing process for the selected roll.
Statistical data of other users
As a result, you will get an advanced IMG structure, in our example FF Log settings, which you can access via the transaction SPRO. Finally, you could use the transaction COAT (see SAP Note 1089923) to assign additional attributes to your own tables and reports, for example. For example, this could be relevant for the tax audit and final reports or performance critical.

User master record - Used to log on to the SAP system and grants restricted access to SAP system functions and objects via the authorization profiles specified in the role. The user master record contains all information about the corresponding user, including authorizations. Changes only take effect the next time the user logs on to the system. Users already logged on at the time of the change are not affected by the changes.

"Shortcut for SAP systems" is a tool that enables the assignment of authorizations even if the IdM system fails.

In the VARIANT column, you can simply use a sequential numbering.

The website www.sap-corner.de offers a lot of useful information about SAP authorizations.


We advise you not to use the self-set password with a self-service as a generated password is more secure.
SAP Corner
Zurück zum Seiteninhalt