Authorizations are described using Authorization Objects An authorization object defines the fields which appear in an authorization. The system checks in user master data if a user has the corresponding authorization for certain specifications in fields.

Authorizations are grouped together in Authorization Profiles.

A user’s authorizations for the different authorization objects are taken from the authorization profiles assigned to him or her in the user master record.

You can easily set up authorizations using the Profile Generator in the form of Roles. From a business management view, roles represent an overview of the tasks and activities that someone may carry out in the system. Authorizations are parts of roles and are generated using the Profile Generator. You can generate multiple authorization profiles for each role.

For more information on setting up authorizations and authorization profiles, see the Implementation Guide for Personnel Administration under Maintain Profiles: Tools ® Authorization Administration ® Maintain Profiles.

Time-Dependency of the Authorization Check

Technical Aspects of Authorization Checks

Profile Generator: Automatically Generate Profile