Authorization checks (SAP Library - Release Notes for Release 3.0A)

Authorization checks

Description

For cash budget management and commitment accounting, the authorization profiles F_FICB_ALL and F_FICA_ALL were defined for Release 3.0. These authorization profiles contain the following authorization objects:

F_FICB_FKR Financial management area authorization:

determines the authorization for access to the data in a whole financial management (FM) area

F_FICB_FPS Commitment item authorization:

determines the authorization for access to a certain item or certain items in an FM area; this authorization can also be limited in time.

F_FICB_VER version authorization:

determines the authorization for access to a certain budget version

For commitment accounting, there are the following additional authorization objects:

F_FICA_CTR Funds center authorization

determines the authorization for using certain funds centers of an FM management area

F_FICA_FCD Fund authorization:

determines the authorization for using certain funds within an FM management area

F_FICA_FTR Budget object authorization:

This authorization object is a certain exception. Authorizations are defined deliberately for the combination of FM area, commitment item, funds center and fund. If a user has an authorization for a particular budget object, no other authorization is checked.

The profile F_FICA_ALL contains all six authorizations while the profile F_FICB_ALL merely contains the three authorizations necessary for cash budget management.

Authorization check

Authorizations are checked in the following sequence:

1. version authorization

2. budget object authorization

3. financial management area authorization

4. fund

5. funds center authorization

6. commitment item authorization

If the user does not have an authorization for a particular version, further processing is refused. Then the check is carried out on budget object level (fund, funds center, commitment item). If a budget object authorization exists, no other authorization is checked and processing is allowed. If no budget object authorization exists, the other authorizations (FM area, fund, funds center, commitment item) are checked.

Change system parameters in customizing

Authorizations are defined in the SAP System by specifying permitted values for a standard authorization object. The authorizations are grouped together in profiles. Here you can specify different authorizations for the same authorization object. In the SAP System, authorizations are grouped together into work center profiles. Therefore, one or more profiles must be allocated to the individual employee in the master record.

For more information on profiles and authorizations, refer to the Basis Implementation Guide in the chapter "Authorization management".

Further notes

For more information on profiles and authorizations, please refer to the documents "BC System Administration" and "FI System Administration Guide".