Setting Up Standard Authorizations 

Use

Authorizations for the object classes Business Information Warehouse and Data Mining were already delivered predefined. They are defined according to roles. After transferring the roles (see Transporting Roles), you can assign them to the relevant users in role maintenance.

A role is a collection of activities that describe a certain work area. The authorizations that users need to access transactions and reports in the menu are also given in the role. A role can be assigned to as many users as you want. An authorization profile is automatically created for a role when you generate authorizations for it.

For more detailed documentation on role maintenance, see Role Maintenance.

It is possible to transport roles between SAP systems. For more information, see Transporting Authorization Components.

Procedure

...

       1.      In the SAP Easy Access initial screen, choose SAP Menu ®  Tools  ® Administration  ® Maintain Roles  ® Role Administration  ® Roles , or use the Create Role pushbutton to go straight into the role maintenance.

       2.      Choose Create and Basic Maintenance (Menus, Profiles, Other Objects). Enter a name for the role as well as a short text, and save your entries.

Choose a name that does not start with the prefix SAP as this namespace is already used by the predefined roles delivered as copy templates.

       3.      On the Description tab page, created and changed information is entered automatically. Compile a meaningful text to describe the function of the role.

       4.      Select the Authorizations tab page and then choose Expert Mode for Profile Generation.The pushbutton Selection gives you a list of all the available Authorization Templates. The templates for the BW user roles and tasks begin with S_RS_R.

       5.      Select a template and choose Adopt Reference.

       6.      Edit the authorizations if necessary.

       7.      Generate an authorization profile for the authorizations of the role.

Choose the Generate pushbutton to do this.

       8.      Go back and assign the role to users on the Users tab page, using the relevant names in the list.

The generated authorization profiles are automatically entered in the user master record for these users if you run a user master comparison. To do this, choose User Comparison and then Complete Comparison.

Result

The users to whom you have assigned roles can log on to the system. The user menu appears with the transactions that the user needs for his/her work and for which he is now authorized.