Show TOC

 Symbols and Status Text in Authorization AdministrationLocate this document in the navigation structure

You can edit the display elements using icons in the hierarchy level and in the toolbar.

The current editing status of the organizational units and authorizations is shown in the status (header) line and at the various levels traffic lights.

Traffic Light Display

Traffic Light


Authorization fields have been filled

Authorization fields have not been completely filled

If you click a yellow light in the status line, the system asks if you want to assign the full authorization asterisk (*) to all authorizations that are not filled.

You can assign full authorization in the same way for yellow lights at the level of object classes, objects, or authorizations.

Before you assign full authorization, edit the organizational levels.

Organizational levels are not filled. Choose Org. levels to edit the organizational levels.

Specify a global value for this role for each field representing an organizational level. If, for example, the organizational level PLANTS appears in several authorizations, you only need to edit the plant values once on the Organizational levels screen.

For information about how to obtain a list of all existing organizational levels, see SAP Note 323817.

The status line shows information about open organizational levels and fields and the status of the authorization profile: Unchanged, Saved, Changed or Generated.

The authorization status text displays their editing status. The status of a field, authorization, object, object class or the role is displayed as indicated in the table:

Status Column




All field values in the subordinate levels of the hierarchy are unchanged from the SAP defaults.


In the subordinate levels of the hierarchy there is at least one field that was delivered empty by SAP and that you have later filled with a value.


You have changed the SAP default value of at least one field in the subordinate levels of the hierarchy. The status also changes to Changed if you change an organizational level which was previously set globally (unless you make the change in the Edit organizational levels dialog box.


You have entered at least one authorization, template or profile in the hierarchy below with the Manual () function


The comparison found that the old value is still current for all field values in the subordinate levels of the hierarchy and that no new authorizations have been added.


The comparison found that at least one new authorization has been added to the subordinate levels of the hierarchy. Choose New to expand all new authorizations in the subordinate levels of the hierarchy.


Choose Open, Modified or Maintained to display open, changed or modified authorizations, respectively.

The following buttons are available to you for editing authorization field values:



The field content is displayed.

Edit an authorization field value. Alternatively, you can edit an empty field by double-clicking the content of an authorization field.

Edit the values in the dialog box.


You can assign full authorization by clicking the asterisk in front of an authorization field name. Alternatively, you can use the pushbutton in the input window.

Deactivate an authorization or an authorization object. Inactive authorizations are ignored when profiles are generated. You must deactivate an authorization or authorization object before you can delete it.

Reactivate inactive authorizations


When you edit authorizations, check the values of the authorization fields with a green light as well.

You can show the following additional icons by choosing Utilities → Settings:



Display transactions which use this object.

Summary of authorizations. You can group identical authorization field contents of an authorization object through the Utilities menu.

Copy authorizations

Delete field contents

You can also show the technical names of the authorization objects and activate security checks, by choosing Utilities → Settings.

Adding Authorizations

The standard toolbar contains two pushbuttons to insert authorizations:





Enter single authorizations. Select using object classes. Click on the symbol  to copy authorizations. Choose the pushbutton Insert selected.


Manual entry of authorization objects. Enter the technical names of the authorization objects which are to be added to the role.

When you enter authorizations with Edit → Enter authorization, you can also: