Relationship Between Users, Roles, Model Connections, and Contexts

Use

The model connection you specify for a context is the key link between the context, the model, and roles. A role contains an association between users and the tabs they can access and the permissions they have in the application.

Model connections are integrated with strategy management users, Application Server users, models, and contexts. The combination of all these items enables a secure and custom experience of the application and the data in the model for a strategy management user.

This list shows the progression of how users, roles, models, model connections, and contexts are linked to develop an integrated, secure, and custom environment. Other required tasks that are required but not related to users, roles, model connections, and contexts are omitted from this list. For more information about starting an implementation, see Getting Started with a Full Scorecard Implementation.

Users, roles, models, model connections, and contexts are connected as follows:

• The system administrator adds system users to SAP NetWeaver UME as strategy management users. The system administrator creates roles to specify the permissions and tabs available to strategy management users in the administration application and strategy management application.

  For information, see the Installation Guide for SAP Strategy Management on the SAP Help Portal.

• The Application Server administrator creates a model and adds Application Server users with potentially special views of the data in the model.

  For more information, see the Application Server Help in the Application Server Administrator program.

• The strategy management administrator creates a model connection to specify the strategy management users who can access the model in the application. These users inherit the Application Server user's view of data in the model. For more information, see Model Connection Development.

• The context administrator creates a context to define a set of objects available for certain roles in the application. The context administrator associates the context with a particular model connection and particular roles. For information, see Contexts and Role Assignments.

Once the scorecard administrator creates the scorecard, the users in a particular role are able to access all the objects set up in the context according to their role's permissions as well as access a special view of the data in the model.

You must ensure that the users assigned to a model connection are also assigned to the roles in the context. If you create a model connection and allow all users to access it, then you can be sure all the roles in the context have access to the model.