!--a11y-->
Authorization Concept in CRM
E-Commerce 
You can assign authorizations to users to control the following:
· Entry of a user to a Web shop
· The tasks the user can carry out once in the Web shop.
You have created users.
You
have created a
Web shop
You can create authorization objects and assign them to users and Web shops to control which users can enter a particular Web shop. For more information, see Web Shop Authorizations.
You can assign authorization roles to users in CRM E-Commerce to determine the activities and transactions they can carry out. For example, you can determine whether a B2B Web shop user can create orders, or only display them. Or, for example if an internal employee can manage the Auctioning via Web Shop application. Assigning authorization roles to user’s results in the system performing background checks on the users’ permissions and restricting the tasks they can carry out accordingly. Users can only access menus and transactions relevant to them and their Web-based application authorizations match their backend user authorizations.
SAP delivers a standard set of authorization roles for use in CRM E-Commerce. You must copy these roles and modify them for your users and then assign them to users.
· Modify authorization roles
You do this in your
SAP CRM backend system. In the SAP Easy Access Menu choose Architecture and
Technology ®System Administration
®
User Maintenance ®
Role Administration ®
Roles. Display the standard
role, copy it, and modify the authorizations accordingly. For more
information, see
Role
Maintenance.
· Assign authorization roles to users
You can assign the authorization roles to users in backend user creation and the Web-based user management application.
Backend Assignment:
In the SAP Easy Access Menu choose Architecture and Technology ®System Administration ® User Maintenance ®Users (transaction SU01). Assign the modified roles on the Role tab page of the users master record.
Web-based:
When creating a user in the Web-based user management application the system displays a list of modified authorization roles for your selection.

To enable authorization role assignment in the Web-based user management application you need to make the created authorization roles available in the Web-based application. In Customizing for Customer Relationship Management choose E-Commerce ®Basic Settings for E-Commerce ®Internet User ®Web-based User Management ® Set Up Roles for Web-based User Management.
You can assign the authorization roles to users directly to users or by using reference users.
For a list of the standard authorization roles delivered for CRM E-Commerce that you can modify, see Authorization Roles in CRM E-Commerce.