Assigning Roles 

Use

All the functions for the maintenance and follow-up processing of the roles and user assignments copied from the portal are performed using Transaction WP3R (see Working with Transaction WP3R).

Prerequisites

Procedure

To assign an authorization role on the SAP system side:

  1. Start Transaction WP3R and activate option Assign authorization roles to users on the initial screen.

A report is started which looks like role maintenance but which contains an additional hierarchy level containing the SAP user name. The SAP user name contains the following entries:
  1. Each authorization role is preceded by a checkbox that shows whether the user is currently assigned to the authorization role.

    2. Assign the users to the corresponding authorization roles by activating the checkboxes in front of the authorization roles with Authorization role ® Assign.

    You can cancel assignments with Authorization role ® Unassign.

  2. Click on Save to save your changes.

The system expects at least one authorization role to be assigned for each logical system that is assigned to a portal role. Vice versa, the system also expects you to remove all authorization roles from the assignment if the portal cancels a user's authorization for a portal role.

You can assign the roles automatically with Utilities ® Propose assignment. The system automatically sets the assignments for all the displayed users where this is clearly possible. If there are multiple authorization roles for a portal role in a logical system, the system does not change the current assignment and instead gives you a warning (see Automatic Role Assignment in the Background).

Time-dependent role assignments are not taken into consideration. The authorization role is always assigned with a validity from the current date until December 31, 9999.