User Management 

User management for Personnel Management uses the mechanisms provided by SAP Web Application Server (ABAP, Java, or ABAP and Java), for example, tools, user types, and password policies. For an overview of how these mechanisms apply for Personnel Management, see the sections below. In addition, there is a list of the standard users that are necessary for operating Personnel Management.

User Management Tools

The table below shows the tools for user management in Personnel Management.

User Management Tools

Tool	Detailed Description	Prerequisites
User and Role Maintenance (transaction PFCG)	You can use the Role Maintenance transaction PFCG to generate profiles for your Personnel Management users.

User Types

It is often necessary to specify different security policies for different types of users. For example, your policy may specify that individual users who perform tasks interactively have to change their passwords on a regular basis, but not users who run background processing jobs.

The user types required for Personnel Management include:

·        Individual users

¡        Administration users for

§         Personnel Administration

§         Benefits Administration

¡        Managers for

§         Personnel Administration

§         Benefits Administration

§         Compensation Administration

§         Training and Event Management

¡        Specialists for

§         Personnel Administration

§         Benefits Administration

§         Compensation Administration

§         Training and Event Management

·        Technical users

Technical users are required for the following business processes:

¡        WF-BATCH user

If you want to use the workflow functions for the different Personnel Management functions, you must create a WF-BATCH system user in the standard system.

¡        Distribution of master data through ALE technology. For more information, see the documentation for the report RHALEINI (HR: ALE Distribution of HR Master Data).

¡        Compensation Management (PA-CM): For the integration with the Award function, the technical user requires authorization for the following functions:

§         Call RFC function module HRCM_RFC_LTI_ACCRUALDATA_GET (Determine awards data for accumulating accruals)

§         Read the Award infotype (0382), authorization object P_ORGIN

¡        Budget Management (PA-PM)

§         You use background processing to create commitments in accounting with a RFC connection. Depending on the process and the system landscape used, it may be necessary to set up a user for the background processing. You can use your own user (an additional logon is required) or set up a special commitment engine user.

For more information about these user types, see the SAP Web AS ABAP Security Guide under User Types.