Show TOC

Background documentationTemplate Roles

 

The SAP Application Interface Framework provides predefined template roles that you can change or copy in order to define roles for your specific requirements.

Features

There are two types of roles delivered with the SAP Application Interface Framework:

  • Single roles

    Provide suggestions for the combination of different authorization objects and values in a role to fulfill a specific task

  • Composite roles

    Provide suggestions for the combination of single roles, so that the requirements of common user role responsibilities are fulfilled

Example

Single Roles

You can assign the role /AIF/CORRECT_DATA to users who are responsible for the data consistency in the SAP Application Interface Framework. The user has the authority to examine interface data, correct inconsistencies, and execute the Monitoring and Error Handling transaction.

The template role /AIF/CORRECT_DATA contains the following authorization data:

Authorization Object

Field

Values

S_TCODE

TCD (Transaction Code)

/AIF/CORRECTIONS, /AIF/IDXTBL

/AIF/ERR

/AIF/NS (Namespace)

(no value predefined)

/AIF/IF (Interface Name)

(no value predefined)

/AIF/IFVER (Interface Version)

(no value predefined)

ACTVT (Activity)

16 (Execute)

Composite Roles

You can assign the composite role /AIF/BUSINESS_USER to users who are responsible for error handling. It includes the authorization to display and change fields of data messages in the Monitoring and Error Handling transaction, restart data messages, cancel data messages, and maintain value mappings. The role does not include the authorization to carry out emergency corrections, view the Monitoring and Error Handling transaction in technical mode, or display and change the configuration or interface Customizing.

Note Note

You can limit the authorization to specific namespaces, interface names, and interface versions.

End of the note.

/AIF/BUSINESS_USER is composed of the following single roles:

  • /AIF/ERRHDL_CHANGE

  • /AIF/ERRHDL_DISPLAY

  • /AIF/PROCESS_INB

  • /AIF/PROCESS_OUTB

  • /AIF/PROCESS_RES

  • /AIF/VMAP_CHANGE

  • /AIF/VMAP_DISPLAY

Recommendation Recommendation

The role /AIF/BUSINESS_USER is recommended for all normal business users.

End of the recommendation.

More Information

Recommendation Recommendation

For more information about template roles and other security issues, see the Master Guide for the SAP Application Interface Framework.

End of the recommendation.