Authorizations

 

HCM Processes and Forms uses the authorization concept provided by the SAP NetWeaver AS ABAP. Therefore, the recommendations and guidelines for authorizations as described in the SAP NetWeaver AS Security Guide ABAP also apply to HCM Processes and Forms.

The SAP NetWeaver authorization concept is based on assigning authorizations to users based on roles. For role maintenance, use the profile generator (transaction PFCG) on the AS ABAP.

Note Note

For more information about how to create roles, see Role Administration.

End of the note.

Role and Authorization Concept for HCM Processes and Forms

The authorization concept for HCM Processes and Forms is described under Authorization Concept of HCM Processes and Forms.

Standard Roles

The table below shows the standard roles that are used for HCM Processes and Forms authorizations.

Standard Roles for HCM Processes and Forms

Role

Name

Description

SAP_ASR_HRADMIN_SR_HCM_CI_3

HR Administrator: NWBC Role

This single role contains the authorizations for the HR Administrator role.

SAP_ASR_EMPLOYEE_SR_HCM_CI_3

ESS Single Role for HCM PF Services

This single role contains the authorizations for the Employee role in Employee Self-Service (WDA).

SAP_ASR_EMPLOYEE

HR Administrative Services : Employee

This single role contains the authorizations for the Employee role in the Business Package for Employee Self-Service (up to and including 1.4.1).

SAP_ASR_MANAGER

HR Administrative Services : Manager

This single role contains the authorizations for the Manager role.

Note Note

The Employee and Manager roles use HCM Processes and Forms. For security-relevant information regarding these components, see the chapters Employee Self Service and Manager Self Service under Start of the navigation path Cross-Application Components Next navigation step Self Services End of the navigation path in the SAP ERP Central Component Security Guide.

End of the note.

Standard Authorization Objects

The table below shows the security-relevant authorization objects that are used by HCM Processes and Forms:

Authorization Object

Name

Comment

S_RFC

Authorization Check for RFC Access

S_SCMG_CAS

Case Management: Case

These authorization objects manage access to the Process Object of HCM Processes and Forms.

S_SCMG_FLN

Case Management: Authorization by Field

S_SRMGS_CT

Records Management: Authorizations for Document Content

These authorization objects manage access to the digital Personnel File in the HR Administrator Role.

S_SRMGS_DC

Records Management: Authorization for Documents

S_SRMGS_PR

Records Management: Authorizations for Attributes

S_SRMSY_CL

SAP Records Management : General Authorization Object

S_TCODE

Transaction Code Check at Transaction Start

P_ASRCONT

Authorization for Process Content

This authorization object manages the rights to start and execute processes with HCM Processes and Forms.