Authorization Objects for Documents
The document management authorization objects are elements of the standard system authorization concept.
They enable you to use complex authorizations for processing documents and their original application files.
Document processing is organized in accordance with your company’s structure. Master data for all application areas is often created at one central location. Data that is specific to an application area is then added using the Change
function.
The authorization system can be set up accordingly. Access authorizations are controlled via various authorization objects.
If you want to link the document to other SAP objects, the system also executes the authorization checks from the appropriate application areas while you are processing.
Example
If you execute document management functions from within engineering change management, the system checks the authorizations for engineering change management. The authorization objects are allocated to the Production Planning object class.
Note
You need not know the individual authorization objects in detail if you generate the authorization profiles for the individual activity groups using the profile generator.
Structure
The authorization objects for documents are assigned to the Document Management object class. The following authorization objects are defined for document management in the standard system.
Authorization Object C_DRAW_TCD (Activities for Documents)
The following table shows authorization object C_DRAW_TCD
. This object controls which users can process which document info records, based on a combination of activity and document type.
Fields | Possible Values | Description |
|---|---|---|
(Activity) | 01 02 03 06 17 | Create Change Display Delete Maintain number range object |
(Document type) | The activities can be executed for the document type. |
Authorization Object C_DRAW_TCS (Status Dependent Authorization)
The following table shows authorization object C_DRAW_TCS
. This object controls which users can process which document info records, based on a combination of activity, document type, and status.
Fields | Possible Values | Description |
|---|---|---|
(Activity) | 01 02 03 06 | Create Change Display Delete |
(Document type) | The activities can be executed for the document type. | |
(Document status) |
Authorization Object C_DRAW_STA (Document Status)
The following table shows authorization object C_DRAW_STA
. This object controls which status(es) can be set for which document type.
Fields | Description |
|---|---|
(Document type) | The statuses are allowed for this document type. |
(Document status) |
Authorization Object C_DRAW_BGR (Authorization Group)
The following table shows authorization object C_DRAW_BGR
. This authorization object allows you to limit access to individual documents.
Fields | Possible Values | Description |
|---|---|---|
(Authorization group) | 0000 – ZZZZ | Used to restrict the authorizations for document maintenance further. |
Authorization Object C_DRAW_DOK (Document Access)
The following table shows authorization object C_DRAW_DOK
. This authorization object controls which original data of a specific document type there are access authorizations for.
Fields | Possible Values | Description |
|---|---|---|
(Activity) | 52 53 54 55 56 57 | Change application start Display application start Display archive application Change archive application Display archive Store archive |
(Document type) | Here you enter the document type that access to original data is allowed for. |
Authorization Object C_DRAD_OBJ (Object Link)
The following table shows authorization object C_DRAD_OBJ
. This object controls which users can process which document info records, based on a combination of activity, object, and status.
Fields | Possible Values | Description |
|---|---|---|
(Activity) | 01 02 03 06 | Create Change Display Delete |
(Object) | You must enter the data base table for the objects here (for example, MARA for material record). | |
(Document status) |
Authorization Object PLM_DIR
The following table shows authorization object PLM_DIR
. This object is relevant if you use access control management on the PLM Web UI.
Fields | Possible Values | Description |
|---|---|---|
(Activity) | 01 | Create or generate |
02 | Change | |
03 | Display | |
06 | Delete | |
22 | Enter, include, assign | |
53 | Display application start | |
70 | Administer | |
71 | Analyze | |
80 | ||
A3 | Change status | |
PU | Publish | |
V1 | Create version |
Authorization Object PLM_DIR2
The following table shows authorization object PLM_DIR2
, which is relevant for the document browser on Web UI.
Fields | Possible Values | Description |
|---|---|---|
(Activity) | 36 | Extended maintenance For example, this controls whether document structures can be created using CAD integration. A user with this authorization can edit document structures for which the |
43 | Release For example, this allows users to release a document object that is ready for handover to manufacturing. |
Note
For document management on SAP GUI, there are additional checks for document distribution (see Authorization Objects for Document Distribution).