Assign Users (SAP Library - Users and Roles (BC-CCM-USR))

Assign Users

Use

You have created a menu for the new role and setup the authorizations. You must finally assign the roles to users.

Procedure

You have created a menu for the new role and setup the authorizations. You must finally assign the roles to users. Proceed as follows:

Choose the User tab.

The status display in the tab tells you whether the roles have already been assigned to users. If the display is red, no users are assigned. Green means that at least one user is assigned. Yellow means that users are assigned but the user master comparison is not up-to-date.

The status of composite roles only refers to user assignment.

Enter the user name in the list.

Enter the user name either directly or from the possible entries help. You can make a multiple selection with the Select pushbutton, e.g. all users in a user group.

You can specify a validity period for the assignment in the other columns. When you assign users to the role, the default start date is the current date and the default end date is the 31.12.9999. You can change these default values.

Make a user comparison if necessary.

The generated profile is not entered in the user master record until the users have been compared. Changes to the users assigned to the roles and the generation of an authorization profile also require a comparison.

There are various ways of comparing users:

Choose User comparison in the User tab. The users are compared for the role you created. The status displayed for this key specifies whether a new comparison must be made.

Choose Utilities ® Settings and Automatic comparison at save. When you save the role, a user comparison is performed automatically.

Wait until the user comparison is made with the program PFCG_TIME_DEPENDENCY.

You should schedule PFCG_TIME_DEPENDENCY periodically (preferably daily) as a background job. This ensures that user authorizations are regularly updated. The program performs a complete user master comparison for all roles. The authorizations are updated in the user master records. The authorization profiles of user assignments which have become invalid are removed from the user master record. The authorization profiles of valid user assignments to the role are entered.

Users who are assigned to a composite role are displayed on a gray background in the roles in the composite role. The entries cannot be changed. They should only be changed in the composite role.

If you perform a user master comparison for the composite role, it performs a user master comparison for all roles in the composite role.