Travel Management (FI-TV) (SAP Library - SAP ERP Central Component Security Guide)

Travel Management (FI-TV)

Authorizations

Standard Roles in Travel Management

Role	Description
SAP_FI_TV_TRAVELER	Traveler
SAP_FI_TV_TRAVEL_ASSISTANT	Travel Assistant
SAP_FI_TV_ADMINISTRATOR	Travel Management Administrator
SAP_FI_TV_MANAGER_GENERIC	Approving Manager
SAP_FI_TV_ADVANCE_PAYER	Trip Advance Payer
SAP_FI_TV_TRAVEL_MANAGER	Travel Manager

Authorization Profiles

SAP supplies travel profile FI-TV (infotype 0470 in Human Resources (HR)). You can also create the authorization profile based on the organizational affiliation using the characteristic TRVCP.

Authorization Objects

Travel Management uses authorization object P_TRAVL for all general functions.
Transfer of travel expenses to Accounting is protected by authorization object F_TRAVL.

The status of the travel plan is protected by authorization object F_TRAVL_S.

Network and Communication Security

Travel Management uses the following external interfaces to reservation systems:

· Hotel Reservation Service (HRS)
Communication with the Web service uses HTTPS. You can also use HTTP at your own risk.

· Deutsche Bahn
Communication with the Web service uses HTTPS and is encrypted with PGP.

· Amadeus
The Gateway is the responsibility of the partner.

· Sabre
Communication with the Web service uses HTTPS or a Gateway that is the responsibility of the partner.

· Galileo
The Gateway is the responsibility of the partner.

Data Storage Security

Travel Management transmits credit card information to the named partners. It is not possible to access the data in the SAP system.

Note The system settings (IMG) of Travel Management contain passwords and credit card information that is currently stored in unencrypted form. This information is protected by the standard authorization objects of the SAP Customizing Implementation Guide.