Assigning Roles and Profiles to Authorization Object S_TREX_ADM 

Use

You can launch the TREX admin tool in the SAP system using transaction TREXADMIN, which is assigned to the authorization object S_TREX_ADM. You can control the authorizations for the TREX admin tool in the SAP system by assigning certain roles and profiles to the authorization object S_TREX_ADM.

The SAP authorization concept protects transactions and programs in SAP systems from unauthorized access. On the basis of the authorization concept the administrator gives users authorizations that define which actions those users can carry out in SAP systems after logging onto those systems and carrying out authentication. When a user starts a program or calls up a transaction, the system carries out authorization checks and makes sure that the user has the correct authorizations. The SAP system can then determine which users should be able to carry out which functions and what users should be able to do with data (insert, create, execute, display, change, delete, and so on). It can also determine the organizational limits within which users can carry out these actions. Activity groups, profiles, collective profiles, authorization objects, control fields, and transactions are important parts of this concept.

For more information on the authorization concept in the SAP system and on using users and roles, see Users and Roles (BC-SEC-USR).

Prerequisites

You are using Search and Classification (TREX) in the SAP system.

Procedure

       1.      Assign the authorization object S_TREX_ADM to the roles and profiles to which you want to give authorization for the TREX admin tool in the SAP system. To do this you can create a new role or profile or you can use existing ones. You carry out these activities in transaction PFCG (role maintenance). For more information on using this transaction, see Users and Roles (BC-SEC-USR).

       2.      Set the value for the authorization object in the field ACTVT to 16 (execute).

This value gives the role or profile in question permission to call up and execute the transaction TREXADMIN.

Result

The transaction TREXADMIN, and therefore the TREX admin tool in the SAP system, can only be called up by users who have authorization due to being assigned to a relevant role or profile.