Symbols and Status Text in Authorization Administration (SAP Library

Symbols and Status Text in Authorization Administration

You can edit the display elements using icons in the hierarchy level and in the toolbar.

The current editing status of the organizational units and authorizations is shown in the status (header) line and at the various levels traffic lights.

Traffic Light Display

Traffic Light	Notes
	Authorization fields have been filled
	Authorization fields have not been completely filled If you click a yellow light in the status line, the system asks if you want to assign the full authorization asterisk (*) to all authorizations that are not filled. You can assign full authorization in the same way for yellow lights at the level of object classes, objects, or authorizations. Before you assign full authorization, edit the organizational levels.
	Organizational levels are not filled. Choose Org. levels to edit the organizational levels. Specify a global value for this role for each field representing an organizational level. If, for example, the organizational level PLANTS appears in several authorizations, you only need to edit the plant values once on the Organizational levels screen. For information about how to obtain a list of all existing organizational levels, see SAP Note 323817.

The status line shows information about open organizational levels and fields and the status of the authorization profile: Unchanged, Saved, Changed or Generated.

The authorization status text displays their editing status. The status of a field, authorization, object, object class or the role is displayed as indicated in the table:

Status Column

Status	Notes
Standard	All field values in the subordinate levels of the hierarchy are unchanged from the SAP defaults.
Maintained	In the subordinate levels of the hierarchy there is at least one field that was delivered empty by SAP and that you have later filled with a value.
Changed	You have changed the SAP default value of at least one field in the subordinate levels of the hierarchy. The status also changes to Changed if you change an organizational level which was previously set globally (unless you make the change in the Edit organizational levels dialog box.
Manual	You have entered at least one authorization, template or profile in the hierarchy below with the Manual () function
Old	The comparison found that the old value is still current for all field values in the subordinate levels of the hierarchy and that no new authorizations have been added.
New	The comparison found that at least one new authorization has been added to the subordinate levels of the hierarchy. Choose New to expand all new authorizations in the subordinate levels of the hierarchy.

Pushbuttons

Choose Open, Modified or Maintained to display open, changed or modified authorizations, respectively.

The following buttons are available to you for editing authorization field values:

Icon	Notes
	The field content is displayed.
	Edit an authorization field value. Alternatively, you can edit an empty field by double-clicking the content of an authorization field. Edit the values in the dialog box.
*	You can assign full authorization by clicking the asterisk in front of an authorization field name. Alternatively, you can use the pushbutton in the input window.
	Deactivate an authorization or an authorization object. Inactive authorizations are ignored when profiles are generated. You must deactivate an authorization or authorization object before you can delete it.
	Reactivate inactive authorizations

Note

When you edit authorizations, check the values of the authorization fields with a green light as well.

You can show the following additional icons by choosing Utilities ® Settings:

Icon	Notes
	Display transactions which use this object.
	Summary of authorizations. You can group identical authorization field contents of an authorization object through the Utilities menu.
	Copy authorizations
	Delete field contents

You can also show the technical names of the authorization objects and activate security checks, by choosing Utilities ® Settings.

Adding Authorizations

The standard toolbar contains two pushbuttons to insert authorizations:

Key

Notes

This graphic is explained in the accompanying text Selection

Enter single authorizations. Select using object classes. Click on the symbol This graphic is explained in the accompanying text to copy authorizations. Choose the pushbutton Insert selected.

This graphic is explained in the accompanying text Manual

Manual entry of authorization objects. Enter the technical names of the authorization objects which are to be added to the role.

When you enter authorizations with Edit ® Enter authorization, you can also:

● Add full authorization (add all authorizations for an authorization object)

● Add authorizations from a profile

● Copy Authorizations from SAP Templates