Show TOC

Define Authorization Keys for Status Management

In this step you define authorization keys which you can use to set up authorization checks when you manually set or delete a user status. When the system sets a user status as a reaction to business transaction, it does not perform an authorization check.

When you set or delete a user status , the system checks whether the user is authorized for this action. In addition to the status profile and the object type, the system also checks the authorization key assigned to the user status in question.

Example

You want to define that certain user statuses can be changed only by a specified employee group.

To do this, create an authorization key and assign it to the relevant user statuses.

In the general authorization maintenance you can then assign authorizations for this key via the authorization object B_USERSTAT.

Activities

1. Check whether you want to define authorizations for your user statuses.
2. If necessary, create authorization keys as follows:
a) Choose "New entries".
b) Enter a key and an explanatory text in the appropriate fields and choose "Save".
You have now created the authorization key.
3. Assign the authorization key to one or more user statuses in your status profile.
4. Define corresponding authorizations and include them in the relevant authorization profiles.