Assigning Authorization Default and Generate

Use

The authorization aspect is covered in this procedure. For the Web Dynpro Application, you have to add the authorization manually. It is not automatically assigned by a transaction. You have the following options for assigning authorizations for POWER lists:

  • If you know the specific authorization object you want to reference with your POWER list, you can assign it manually to the generated role profile.

  • If a specific transaction or a specific report is the basis for the POWER list, you can just assign the authorization default for this transaction to the role. This entry assigns the necessary authorization objects to the generated profile. This procedure is described below.

A profile with the relevant authorization objects is created for each new role. This profile has to be generated for the given user.

Procedure

  1. Start of the navigation path Choose Tools Next navigation step Administration Next navigation step User Maintenance Next navigation step Role Administration Next navigation step Roles (transaction PFCG) End of the navigation path

  2. On the Role Maintenance screen specify the role to be edited.

  3. Choose Change .

  4. On the Change Role screen, choose the Menu tab.

  5. Navigate to the folder within the role menu where your POWER list is assigned.

  6. In your role menu, choose Authorization default .

  7. In the Services dialog box, enter the transaction which is referenced in the POWER list in the transaction code field.

  8. Choose Copy . Place the new entry near the entry for the POWER list.

  9. Whenever an entry is added to the role (transaction, report, or Web Dynpro Application), the traffic light on the Menu tab page remains red. It shows you that several authorization objects need values due to the transactions you added. Choose the Authorizations tab page and then Change Authorization Data .

  10. At this point, PFCG requests you to maintain authorization objects that are relevant for several transactions and would need to be maintained several times in the next screen. By entering the values now, you can save time.

  11. On the Change role: Authorizations screen, the traffic lights to the left of each item give you information about the areas where authorizations need to be adjusted. Expand the nodes you want to look at in more detail.

  12. By double-clicking on the relevant line, you can call the change view of the object. Alternatively, you can choose the asterisk (*) to the left of the line to maintain this value with no limitation.

  13. In the Define Values dialog box, you get either a selection of values you can choose from, or you can enter your own values. This depends on the objects you are editing.

  14. Make sure that all red and yellow traffic lights turn green. Once all traffic lights are green, save your work.

  15. When you save, a dialog box appears informing you that a profile will be created based on your work.

  16. To generate the profile, choose Generate for the top level node. This enables you to avoid having to generate each transaction manually.

  17. In the Generate profile dialog box, choose Generate.

  18. The Menu and the Authorization tabs should show green traffic lights. You can ignore the traffic light for the Users tab. As long as no users are assigned, this traffic light is allowed to stay red.

  19. Choose the User tab and enter your user.

  20. Choose Enter and save the role.

  21. Choose User comparison .

  22. On the Compare Role User Master Record screen, choose Complete Comparison.

  23. Save your role again.