Defining Criteria

Use

On the Define Criteria screen, you specify the role type, import source, and other parameters for importing multiple roles.

Procedure

To define the criteria, do the following:

In the Role Selection area, select the role type.

Note

When you select a role type, the application makes inactive fields that are not applicable for that type. For example, if you select Business Role, the application makes inactive the User Input and Role Authorization Source fields.
In the Import Source area, select the Role Attribute Source and the Role Authorization Source.

Note

You must have the authorization S_CTS_SADM to use the option File on Server.

Role attributes are details for the role, and include information such as role name, process, subprocess, and so on. Depending on the role type, the role attribute source may be from the following: User Input, File on Server, or File on Desktop.

The role authorization source is the object that provides the authorization information for the roles. Depending on the role type, the role authorization source may be from the following: Backend System, File on Server, or File on Desktop. The settings are applicable to both PFCG and non-PFCG role authorizations.

Note

For technical roles, you can choose Skip if the role authorization source is not applicable.
In the Templates area, you can download:
- Role attributes file template
- Non-PFCG role authorizations template
In the Definition Criteria section, choose the application type, landscape, and whether or not to overwrite the existing role.

Note

The application types available in the Application Type dropdown list changes depending on the role type you select.
In the Role Selection Criteria area, further refine the roles to import by specifying the source system, range of roles, and so on.
You can choose to Import all roles except SAP Predefined Roles. That is, only import roles you have created or customized; do not import the standard roles provided by SAP.

In the Methodology Status field, you can choose to import only roles of a specific status, such as Complete or Initial.