Authorization Administration 

Purpose

The conception of authorization administration is based on the standard authorization administration in  the current account system. For documentation on this authorization administration, see the SAP Library under Users and Roles (BC-CCM-USR).

You use authorization administration to represent authorization and areas of expertise. In the current account system, authorization objects are provided for

·        Online entry transactions

·        Reports

·        Customizing transactions

These can restrict the creation, change, display, locking, deletion, reversal, transfer posting, return, execution, and simulation of data or processes.

Thanks to the modular authorization concept of the system, you can define roles to suit the work centers of your employees. You can adapt authorization, for example, to suit a work center at which private customers or corporate customers are serviced, or to suit processing staff working in payment transactions.

These profiles contain various authorizations that you can use to define the business objects that your employees are allowed to process (authorization objects), and which processing functions are allowed.

Prerequisites

You define the authorizations in the Implementation Guide (IMG). Choose Authorization Administration.

Process Flow

The business objects to which you assign the authorizations are defined by the system as authorization objects. (This online documentation contains a summary of the authorization objects that are checked in the customer accounts system.)

This results in the following procedures:

...

       1.      Create a concept regarding which roles you need and how their tasks are to be defined.

       2.      Process the relevant activities in Customizing:

¡        Maintain Authorization Types

You can use authorization types for the account, conditions, payment orders, payment items, standing orders, and means of payment management by using the fields of each object.

¡        Specify Authorization Field Groups

¡        Maintain Authorization Groups

¡        Generate and Assign Authorization

       3.      If required, enter the Amount-Dependent Authorizations according to the bank area, product, transaction type, or notice category.

 Special features of authorization administration in the current account system

To protect access in the areas of payment items, payment orders, standing orders, amount notice, and holds, you can assign differentiated, amount-dependent authorizations:

In these cases, you can specify amount limits under which the functions are allowed to be used. Additionally, you can specify here that a check in accordance with the principle of dual control is to apply when the limits are exceeded.

Result

By assigning authorizations and roles, you give your employees the corresponding access and editing rights.