Show TOC

Function documentationAuthorizations


In Recipe Development, you can use access control management (ACM) on the PLM Web user interface (see Authorizations and Access Control Context (PLM-WUI-APP-AC)).

The PLM Web User Interface (PLM Web UI) comes delivered with sample composite roles that contain a central context role definition, and the necessary additional roles that were defined with the Role Maintenance (PFCG) transaction. The following sample composite roles for ACM have been defined for Recipe Development:

These roles contain all necessary authorization roles (PFCG roles) and authorization objects.

If you want to assign different authorizations for formula developers and process developers, you can change the single role Recipe Developer SAP_PLMWUI_RECIPE_MAINTAIN contained in the SAP_PLMWUI_DEMO_RCP_DEVELOPER role accordingly (see Different Authorizations for Formula Developers and Process Developers and Recipe Developer).

If you do not use ACM, you can assign the authorizations by using the roles and authorization objects described below.

Authorization for Status Management

To control the authorization for status management, you use the authorization object PLM Authorizations for Status Management (PLM_SAM).

Authorization for Specification Management

For specification management, a user needs the following user roles:

Authorization for the Development of Recipes

To display recipes, a user needs the following single roles:

To be able to create and change recipes, a user needs the following single roles:

To synchronize recipes with BOMs, a user needs the single role SAP_PLMWUI_RECIPE_H2M (see Recipe Synchronization Planner).

Authorization Groups for Recipes

Using authorization groups, you can restrict recipes to user groups that are authorized to work with these recipes. To be able to use authorization groups in Recipe Development, the authorization group must be assigned the specification category RECIPE_WUI.

You create the authorization group in Customizing for Recipe Development under Start of the navigation path Recipe Next navigation step Specify Authorization Groups End of the navigation path. You can also select the specification category there.

You can use authorization groups in combination with Access Control Management (ACM). For example, you can use authorization groups for statistical calculations that reflect the general organizational structure of your company, and you can use the access control management to assign authorizations dynamically.

You can use the same or different authorization groups for specifications and recipes. If you use the same authorization groups, you only have to create one authorization group in Customizing and then assign it to both specification categories.

Authorization for Labeling

To control the authorization for labeling, you use the authorization object Permission Check for Label (C_RMSL_LBL).