Show TOC

Maintain Authorizations for Master Data

In this section, you see which authorization objects are defined in the standard system for the individual application functions. You can maintain authorizations for these objects in the R/3 System.

The easiest way to maintain authorizations is by using roles.

Note that the maintenance of authorizations using roles is a new function. The previous procedure is still supported and is described below.

This step is used to createActivity groups an generate authorization profiles using the Profile Generator.

Activities

To assign an authorization profile to a user, do the following:

1. Create an activity group
2. Enter a description
3. Select transactions
4. Create and edit authorizations
5. Assigns users and compare the user master (in doing so, the profile is entered in the user's master record)
6. Transport activity groups, if desired

Detailed documentation

For more information about the procedures, see transaction documentation

Note

You can also use authorization profiles you created manually or were delivered by SAP, in activity groups. You can create an activity group without a menu and include the corresponding profile in the authorization data of the activity group.

In the fourth step, choose "Edit -> Add authorization -> From profile" to add the authorization profile data to the activity group.

Below, you can find information about the previous procedure for versions up to and including 4.0.

Authorization objects

The following list shows which authorization objects are checked for the individual application functions.

Functions for... Authorization object
Process equipment
I_BEGRP Authorization group
I_IWERK PM planning plant
I_SWERK Maintenance plant
I_BETRVORG Business operations
I_INGRP Maintenance planner group
I_KOSTL Cost center
Classify equipment C_TCLA_BKA Class types
Process functional locations
I_BEGRP Authorization group
I_IWERK PM planning plant
I_SWERK Maintenance plant
I_BETRVORG Business operations
I_INGRP Maintenance planner group
I_KOSTL Cost center
Classify functional
locations C_TCLA_BKA Class types
Process network links I_BEGRP Authorization group
I_IWERK PM planning plant
I_SWERK Maintenance plant
Classify network links C_TCLA_BKA Class types
Material M_MATE_STA Maintenance status
M_MATE_BUK Company code
M_MATE_WRK Plant
M_MATE_VKO Distribution channel
M_MATE_LGN Warehouse
Classify material C_TCLA_BKA Class type
Bills of material C_STUE_BER Bills of material
Process permits I_SOGEN Permits
Process measuring points
I_BEGRP Authorization group

Authorizations for preventive maintenance

Maintenance plans
I_INGRP PM planner group maintenance item
I_KOSTL Cost center for maintenance item
I_BEGRP Authorization group

Authorization for PM task lists

Task lists I_ROUT General task list maintenance
I_ROUT1 Task list authorization detail

Authorizations for notification processing

PM notifications I_IWERK PM planning plant
I_SWERK Maintenance plant
I_QMEL Notification types
I_VORG_MEL Business operations

You can obtain an overview of the possible operations using transaction 'OIAH'.

Classify notifications C_TCLA_BKA Class types

Authorizations for order processing

PM orders C_AFKO_AWK Order types
C_AFKO_DIS MRP controllers
C_DRAW_TCD Documents transactions
C_DRAW_BGR Authorization group documents
I_IWERK Maintenance planning plant
I_SWERK Maintenance plant
I_AUART Order types
I_KOSTL Cost center
I_SOGEN Permits
I_INGRP Maintenance planner group
I_VORG_ORD Business operations orders

You can obtain an overview of the possible operations using transaction 'OIAH'.

Classify orders C_TCLA_BKA Class types
Comp.confirmations
I_IWERK maintenance planning plant

Standard settings

In the SAP standard delivery, authorizations are provided for all authorization objects of the application.

You will find for authorization objects

The delivered authorizations are valid for all organization units.

Activities

1. Check the delivered authorizations as follows:
a) Select the object class for the application.
You see the list of authorization objects.
b) Select an object.
You see the list of authorizations for this object.
2. If necessary, create new authorizations:
a) To do this, select Authorization -> Create
b) Enter the authorization and a short text.
c) Select a field to maintain individual field values.
d) Save and activate the new authorization.

Note

The authorizations listed here refer to functions in Plant Maintenance. Remember that your users may need further authorizations to edit business processes.

You transport authorizations as follows:

1. Display the list of authorizations.
2. Select the object class.
3. Choose Authorization -> Transport.
4. Select the authorizations you wish to transport.
5. Confirm your selections and enter the correction number.