User Management

 

User management for Human Resources uses the mechanisms provided by SAP NetWeaver Application Server (ABAP, Java, or ABAP and Java), for example, tools, user types, and password policies. See the sections below for an overview of how these mechanisms apply to Human Resources. In addition, there is a list of the standard users that are necessary for operating Human Resources.

User Administration Tools

The table below shows the tools for user management in Human Resources.

Tool

Description

User and role maintenance with SAP NetWeaver AS ABAP (Transactions SU01 and PFCG)

For more information, look for User Administration and Identity Management in ABAP Systems in the documentation of SAP NetWeaver at http://help.sap.com/netweaverInformation published on non-SAP site.

User Management Engine of SAP NetWeaver AS Java

This tool is used for user management of HR portal roles (business packages).

For more information, look for User Management Engine in the documentation of SAP NetWeaver at http://help.sap.com/netweaverInformation published on non-SAP site.

User Types

It is often necessary to specify different security policies for different types of users. For example, it may be necessary that individual users who perform tasks interactively have to change their passwords on a regular basis, but not users who run background processing jobs.

The specific user types that are required for human resources include:

  • Individual users

    • Admisnistrator

      • Personnel Administration

      • Benefits Administration

    • Manager

      • Personnel Administration

      • Benefits Administration

      • Compensation Administration

      • Training and Event Management

    • Specialists for

      • Personnel Administration

      • Talent Management

      • Benefits Administration

      • Compensation Administration

      • Training and Event Management

  • Technical users

    Technical users are required for the following business processes:

    • WF-BATCH user

      If you want to use the workflow functions for the different Personnel Management functions, you must create a WF-BATCH system user in the standard system.

    • Distribution of master data through ALE technology. For more information, see the documentation for the report RHALEINI (HR: ALE Distribution of HR Master Data).

    • Compensation Management (PA-CM): For the integration with the Award function, the technical user requires authorization for the following functions:

      • Call RFC function module HRCM_RFC_LTI_ACCRUALDATA_GET (Determine awards data for accumulating accruals)

      • Read the Award infotype (0382), authorization object P_ORGIN

    • Budget Management (PA-PM)

      • You use background processing to create commitments in accounting with a RFC connection. Depending on the process and the system landscape used, it may be necessary to set up a user for the background processing. You can use your own user (an additional logon is required) or set up a special commitment engine user.

For more information about these user types, see the Security Guide for SAP NetWeaver Application Server ABAP under http://help.sap.com/netweaverInformation published on non-SAP site.