Authorizations 

A multitude of standard roles are shipped with SAP Collateral Management (CM) in the SAP ECC 6.0. These roles are of exemplary character. The standard roles must be modified by the Customers based on their requirements.

The Customers must not use the standard roles in their production systems only with some medications. It is advisable without any modifications. Use the Profile Generator (transaction PFCG) to identify the standard roles and create additional roles.

 

The following roles are available in CM for banks:

Role	Purpose
SAP_FS_CMS_DISPLAY_ALL	Displaying all the entity objects in CM.
SAP_FS_CMS_MAINTAIN_ALL	Maintaining (Create, change and display only) all entity objects.
SAP_FS_CMS_MAINTAIN_ALL_PRC	Executing all the process related activities in addition to maintenance of objects
SAP_FS_CMS_CUST_ALL	Customizing
SAP_FS_CMS_ADMIN	CM administrator role
SAP_FS_CMS_COL_AUDITOR	Maintaining all the entity objects and the access to run all the reports in CM.
SAP_FS_CMS_CREDIT_MANAGER	Displaying collateral objects and collateral agreements.
SAP_FS_CMS_CREDIT_RISK_MANAGER	Maintaining collateral objects and collateral agreements and displaying receivables.
SAP_FS_CMS_LIQUIDATION_OFFICER	Maintaining liquidation measures.

 

Authorization Objects in CM

Technical name	Name
CMS_PCN_02	Authorization for activities (change request mode)
CMS_PCN_01	Authorization for activities (normal mode)
CMS_OMS1	Authorization for all collateral objects other than real estate (replace CMS_OMS from ECC 6.0 onwards
CMS_OMS	Authorization for all collateral objects other than real estate (obsolete from ECC 6.0 onwards)
CMS_CAG	Authorization object for collateral agreements
CMS_RE	Authorization object for real estate objects in CM.
CMS_RBL	Authorization object for receivable in CM.

 

Characteristic Based Authorizations

In the Collateral Management, all the objects must belong to an administration organizational unit. The authorization objects for collateral objects(real estate and other collateral objects) and collateral agreements are based on a combination of the administration organizational unit and the entity type(assigned using a process control key). For receivables, the authorizations are based on the receivable organizational unit, the receivable status and the product. Authorizations for receivables is valid only for the receivables created in the CM or even the local copies of the receivables in external credit systems.

For example, you can use the attribute administration organization unit to differentiate between employee ,VIP and normal customers objects. You can also create objects in these organizational units as characteristics, which can then also be used to protect application data.