Preparatory Steps (SAP Library - Users and Roles (BC-CCM-USR))

Preparatory Steps

You must perform some preparatory measures before you can manage the users centrally in the Global User Manager. They depend on whether you are installing the authorization concept for the first time or you already used the central user administration before the upgrade.

It is assumed that you have a central and several subsidiary systems. The roles are created locally in the subsidiary systems.

A subsidiary system is intended for the application MM, another for SD. Different roles are created locally in each system in Customizing.

When you migrate the roles into the central system the System - Role assignment is copied into the Global User Manager. The roles must be assigned to user groups to which users are assigned, in the Global User Manager. The Role -System assignment determines which systems the user can access.

The following cases can be distinguished:

Your system has been upgraded. The central user administration was not used in the previous Release.

Setup the central user administration by connecting the systems for which users are to be managed centrally. See Installing Central user administration.

Copy the users from the systems into the central system ( Copy users from new systems)

Create the system administrator for the Global User Manager. See Global User Manager authorizations.

Call the Global User Manager and choose Extras ® Migration ® Roles or Extras ® Migration ® Users.

Your system has been upgraded. The central user administration was used in the previous Release.

Create a system administrator for the Global User Manager. See Global User Manager authorizations.

Call the Global User Manager and choose Extras ® Migration ® Users or Roles. The migration copies the current assignments into the Global User Manager. You can then model the user data based on the existing links between roles, users and systems. See Extras ® Migration in Global User Manager functions

The SAP System has been installed for the first time.

Install the Central user management. See Installing Central user administration.

Create all users who are to be active in the individual systems in the system group, in the central system. When you create the users, specify the user groups to which they are to be assigned. You can then assign the systems for all groups in the Global User Manager.

Create the roles in the systems in which they are used (possibly with Customizing functions).

Create a system administrator for the Global User Manager. See Global User Manager authorizations.

Call the Global User Manager and choose Extras ® Migration ® Roles. The data can only be modeled after migration.

Users are only migrated if the systems were also assigned in the user maintenance when the users were created. This is not recommended because the users are assigned to the systems directly and not via the groups.