Authorizations 

Use

Accessing SAP functions via Web services follows the standard SAP authorization concept. This concept is based on authorizations for specific authorization objects. The system checks for the required authorization for an authorization object during the execution of a Web service. If a user does not have this authorization, the execution is terminated, and an error message is returned. 

SAP ERP ES uses the standard authorization objects that are available for mySAP ERP, including authorization default values for Web services.   In addition, you need the authorization S_SERVICE to start external services.  To create and consume Web services, you require the authorizations belonging to the role SAP_BC_WEBSERVICE_ADMIN as well as authorization for the Internet Communication Framework (S_ICF_ADMIN).

For more information about authorizations for Web services, see the SAP NetWeaver documentation at help.sap.com  ® SAP NetWeaver  ® SAP NetWeaver 2004s ® SAP NetWeaver Developer’s Guide® Fundamentals ® Using Java ® Core Development Tasks ® Providing and Consuming Web Services ® Web Service Toolset ® Web Services Security ® Authorization.