Authorizations 

Use

Master Data Framework uses the authorization concept provided by SAP NetWeaver. Therefore, the security recommendations and guidelines for authorizations that are described in the SAP NetWeaver AS ABAP Security Guide also apply to Master Data Framework.

The SAP NetWeaver authorization concept is based on assigning authorizations to users based on roles. For role maintenance, use the profile generator (transaction PFCG) when using ABAP technology and the User Management Engine’s user administration console when using Java.

Standard Authorization Objects

The table below shows the security-relevant authorization objects that are used by Master Data Framework.

Standard Authorization Objects

Authorization Object	Description
R_UGMD_CHA	Master data access for all types of characteristics.
R_UGMD_SNG	Master data access on the level of single values of combination characteristics
S_TABU_LIN	Master data access on the level of individual characteristics
FB_SRV_DMS	Authorization for data model synchronization (change monitor)
FB_SRV_GC	Authorization for MDF Garbage Collector

The authorization objects listed above are also described in the system documentation.