Symbols and Status Text in Authorization Maintenance (SAP Library

Symbols and Status Text in Authorization Maintenance

You can edit the display elements using icons in the hierarchy level and in the toolbar.

The current maintenance status of the organizational units and authorizations is shown in the status (header) line and at the various levels traffic lights.

Traffic Light Display

Lights	Comment
	Authorization fields are maintained
	Authorization fields not completely maintained If you click a yellow light in the status line, the system asks if you want to assign the full authorization asterisk (*) to all authorizations that are not maintained. You can assign full authorization in the same way for yellow lights at the level of object classes, objects, or authorizations. Before you assign full authorization, maintain the organizational levels.
	Organizational levels are not maintained. Choose Org. levels to maintain the organizational levels. Specify a global value for this role for each field representing an organizational level. If, for example, the organizational level PLANTS appears in several authorizations, you only need to maintain the plant values once on the Organizational levels screen. You can display a list of all existing organizational levels using Transaction SUPO.

The status line shows information about open organizational levels and fields and the status of the authorization profile: Unchanged, Saved, Changed or Generated.

The authorization status text displays their maintenance status. The status of a field, authorization, object, object class or the role is displayed as indicated in the table:

Status Column

Status	Comment
Standard	All field values in the subordinate levels of the hierarchy are unchanged from the SAP defaults.
Maintained	In the subordinate levels of the hierarchy there is at least one field that was delivered empty by SAP and that you have later filled with a value.
Changed	You have changed the SAP default value of at least one field in the subordinate levels of the hierarchy. The status also changes to Changed if you change an organizational level which was previously set globally (unless you make the change in the Maintain organizational levels dialog box.
Manual	You have entered at least one authorization, template or profile in the hierarchy below with the Manual () function
Old	The comparison found that the old value is still current for all field values in the subordinate levels of the hierarchy and that no new authorizations have been added.
New	The comparison found that at least one new authorization has been added to the subordinate levels of the hierarchy. Choose New to expand all new authorizations in the subordinate levels of the hierarchy.

Pushbuttons

Choose Open, Modified or Maintained to display open, changed or modified authorizations, respectively.

Authorization field value maintenance functions:

Symbol	Comment
	The field content is displayed.
	Edit an authorization field value. Alternatively, you can edit an empty field by double-clicking the content of an authorization field. Maintain the values in the dialog box.
*	You can assign full authorization by clicking the asterisk in front of an authorization field name. Alternatively, you can use the pushbutton in the input window.
	Deactivate an authorization or an authorization object. Inactive authorizations are ignored when profiles are generated. You must deactivate an authorization or authorization object before you can delete it.
	Reactivate inactive authorizations

Note

When you maintain authorizations, check the values of the authorization fields with a green light as well.

You can show the following additional icons by choosing Utilities ® Settings:

Symbol	Comment
	Display transactions which use this object.
	Summary of authorizations. You can summarize identical authorization field contents of an authorization object by choosing Utilities ® Summarize auths.
	Copy authorizations
	Delete field contents

You can also show the technical names of the authorization objects and activate security checks, by choosing Utilities ® Settings.

Adding Authorizations

The standard toolbar contains two pushbuttons to insert authorizations:

Pushbutton

Comment

This graphic is explained in the accompanying text Selection Criteria

Enter single authorizations. Select via object classes. Click on the symbol This graphic is explained in the accompanying text to copy authorizations. Choose the pushbutton Insert selected.

This graphic is explained in the accompanying text Manual

Manual entry of authorization objects. Enter the technical names of the authorization objects which are to be added to the role.

When you enter authorizations with Edit ® Enter authorization, you can also:

· Add full authorization (add all authorizations for an authorization object)

· Add authorizations from a profile

· Copy Authorizations from SAP Templates