Assigning a Predefined Role to an AMT User 

Use

You use this procedure to assign a predefined role to an AMT user to provide access rights to the Authorization Management Tool (AMT). These predefined roles are available, by default, as part of the prefilled user database when you install AMT.

The various roles are explained in the table below:

Predefined Role	Description	Related Business Component in AMT
SAP_AMT_USER	Perform all authorization activities	Role and User Assignment Business Object Authorization Role Maintenance
SAP_AMT_USER_ADMINISTRATOR	Perform activities related to user maintenance, for example, assigning roles to users and users to roles	Role and User Assignment
SAP_AMT_ROLE_ADMINISTRATOR	Perform activities related to maintenance of roles, for example, creating roles and assigning various levels of authorizations to roles	Role Maintenance
SAP_AMT_AUTHORIZATION_ADMINISTRATOR	Protect business objects, defining rules, variables and tokens, and enabling or disabling authorization	Business Object Authorization

 

Procedure

...

       1.      In the navigation bar, choose Role and User Assignment ® Assign Roles to User.

The Available Users tile appears.

If the following predefined roles are not visible in the Available Roles tile, then quit this procedure and execute the ABAP report, INSERT_ADDITIONAL_AMT_ROLES_40. For more information, see SAP note 657434.

·         SAP_AMT_AUTHORIZATION_ADMINISTRATOR

·         SAP_AMT_ROLE_ADMINISTRATOR

·         SAP_AMT_USER_ADMINISTRATOR

       2.      On the Available Users tile, select the user.

       3.      On the Available Roles tile, select the specific predefined role.

You must assign at least one of the following roles to an AMT user. Otherwise, the user cannot log on to AMT once authorization is enabled.

·         SAP_AMT_USER

·         SAP_AMT_USER_ADMINISTRATOR

       4.      Choose Assign.

The role you have assigned to an AMT user appears in the Assigned Roles tile.