This section provides an overview of the authorization concept used for SAP Landscape Management.

SAP Landscape Management uses the authorization concept provided by SAP NetWeaver Application Server for Java. Therefore, the recommendations and guidelines for authorizations as described in the SAP NetWeaver Application Server for Java Security Guide also apply to SAP Landscape Management.

The SAP NetWeaver authorization concept is role-based. This means that users are assigned roles which contain the required set of authorizations. To maintain these roles, you use the user administration console of the User Management Engine on the Application Server Java.