Entering Values (SAP Library - Users and Roles (BC-CCM-USR))

Entering Values

Define or change single values and / or value ranges for each field in the object. A user who has these values is authorized to execute the corresponding actions.

The system automatically displays the fields for which you must define values. A description of each field is included in the display so that you can easily identify its functions.

You can display the documentation or possible entries for a field by positioning the cursor on the field and choosing Maintain values or Field documentation. When you maintain values a dialog box appears. Choose the possible entries help (F4) for an overview of the values you can enter here.

Rules for Entering Values

Enter single values in From fields only. Do not enter any values in the accompanying To field.

Enter value ranges using the formats below.

Formats for Entering Values in an Authorization

From

To

Authorization

1

3

Values 1, 2, and 3

S_USER*

Any character format beginning with "S_USER"

AB

C*

All values beginning with AB, AC,... or B or C

0

9*

Any numeric value

To exclude a value from a range, specify multiple ranges that do not include the value. For example, the ranges below allow access to all values except those that begin with the string "S_U", for S_USER_ (user maintenance) authorizations.

Excluding Values From a Range of Values

From

To

Authorization

A

S_T*

Values beginning with A through S_T

S_V

Z*

Values beginning with S_V through Z

To authorize a user to leave a field blank, Enter ' ' (a space enclosed in single quotation marks, or ' or simply ' in shorter fields).

For many fields, you can display the values that may be entered by choosing Possible entries.

Cross-system value ranges: If you have a heterogeneous R/3 environment, you should specify value ranges for numbers and letters separately. Example: A to Z and 0 to 9.

You need to define separate ranges as the values are sorted according to the character set used. To include all numbers and letters in a range, for example, you would need different range definitions in ASCII and EBCDIC systems:

ASCII: the value range 0 to Z* includes all numbers and letters, as well as some other printable characters

EBCDIC: the value range A to 9* includes all numbers and letters.

Example

The object displayed below controls actions users belonging to a user group may execute:

Sample Authorization

Object

Fields

Values

User groups

User master maintenance: User group

S*

Administrator action

03 (display)

The sample authorization for object User groups would allow a user to display any user master record belonging to a group whose name begins with S.

From	To	Authorization
1	3	Values 1, 2, and 3
S_USER*		Any character format beginning with "S_USER"
AB	C*	All values beginning with AB, AC,... or B or C
0	9*	Any numeric value

From	To	Authorization
A	S_T*	Values beginning with A through S_T
S_V	Z*	Values beginning with S_V through Z

Object	Fields	Values
User groups	User master maintenance: User group	S*
	Administrator action	03 (display)