Show TOC

Set Authorizations

This step is used to createActivity groups an generate authorization profiles using the Profile Generator.

Activities

To assign an authorization profile to a user, do the following:

1. Create an activity group
2. Enter a description
3. Select transactions
4. Create and edit authorizations
5. Assigns users and compare the user master (in doing so, the profile is entered in the user's master record)
6. Transport activity groups, if desired

Detailed documentation

For more information about the procedures, see transaction documentation

Note

You can also use authorization profiles you created manually or were delivered by SAP, in activity groups. You can create an activity group without a menu and include the corresponding profile in the authorization data of the activity group.

In the fourth step, choose "Edit -> Add authorization -> From profile" to add the authorization profile data to the activity group.

Note on Authorization Maintenance for Authorizations without Transactions

The Profile Generator uses transactions to generate profiles. When you perform the following activities, the system checks authorizations although no transactions are used:

For information on the required authorization objects, see the documentation for the PI-PCS interface.
The system checks whether the user is authorized to send messages in the relevant plant. It checks authorization object C_MESS_WRK with activity A9. The standard system contains the maintenance authorization C_MESS_SND for this.

For the above-mentioned reasons, you must create authorization profiles manually.
Proceed as follows:

1. To create authorization profiles, choose Tools -> Administration -> User maintenance -> Profiles on the SAP R/3 screen.
2. Create the work area for all profiles in namespace C_*. The authorization profiles shipped for the PP-PI component are displayed, for example.
a) Copy the profile whose authorizations best suit your requirements.
b) If required, tailor the profile you copied and the authorizations it contains to your needs.
For more detailed information on authorization profiles, see Application Help during profile processing.
Create Profile
3. Assign your profile to a role.
a) Return to the Customizing activity.
b) Proceed as described in the Note section.