Entering content frameFunction documentation Authorizations Locate the document in its SAP Library structure

Use

By allocating authorizations, you determine:

We provide authorization objects that make it possible for you to define authorizations. An authorization object includes individual fields which contain the individual executable activities. Authorization objects and the activities contained in them can be used to define authorizations and to define a user master record.

In addition to authorization objects, SAP also provides predefined Roles, which contain clearly defined authorizations for the appropriate activities in the R/3 System.

For more information on general authorization maintenance in the R/3 System, see the SAP library under BC users and roles.

Features

You can use the authorization concept to define authorizations in Funds Management for the following activities:

Example

For an example of how you can use authorizations to control budget allocation, see: Internal and Cross-Funds Center Authorizations

If you carry out an action that affects an object in Funds Management, the systems checks that you have the appropriate authorization.

Example

You can find an example of how the authorization check works in budgeting under Authorization Check For Budget Entry

Roles in FM

SAP provides a number of roles for Funds Management; they come in two categories:

You can find an overview of these FM roles under Tools ® Administration ® User maintenance ® Roles.

Authorization group

You define authorization groups in the master record of commitment items, funds centers and funds. Authorization groups make it easier for you to allocate authorizations for FM master data, by allowing you to define an authorization check for several master data objects using a single authorization group.

Example of Authorization Concept for Authorization Groups

This graphic is explained in the accompanying text

Note

If you do not create an authorization group in the master record of a master data object, no authorization check will be performed for this object.

SPACE Fund

In the industry solution for Funds Management Government, you can also execute an authorization check if no value is entered for the fund and the SPACE or BLANK entry applies. To do this, you create an authorization group in the FM area for the SPACE/BLANK fund. You create authorization groups in the Customizing of Funds Management Government under Global settings ® Maintain global parameters.

For more information, see the Implementation Guide.

The standard system includes an authorization for each FM authorization object. You can use this authorization, modify it to meet your requirements, or create new authorizations. For a summary of all Funds Management authorization objects, see Authorization Objects in Funds Management.

See also:

 

 

 

Leaving content frame