Authorization Administration in the Account Management System 

Purpose

The concept of authorization administration in the Account Management system is based on the authorization administration in the SAP System. You can find the documentaion on this authorization administration in the SAP Library. Choose Users and Roles (BC-SEC-USR).

Basically, you use authorization administration to depict authorizations and competencies. In the Account Management system, authorization objects are provided for

·        Dialog transactions

·        Customizing transactions

·        BAPIs

You can use them to restrict creation, change, display, lock, delete, reverse, transfer post, return, execute, simulate data or processes.

Thanks to the modular authorization concept of the system, you have the option of defining authorization profiles / roles tailor-made to suit the work centers of your employees. You can adapt authorization, for example, to suit a work center at which private customers or corporate customers are serviced, or to suit processing staff working in payment transactions.

Within these profiles / roles there are several authorizations for defining which business objects your employees are allowed to edit (authorization objects), and which editing functions are then permitted.

Process Flow

The business objects to which you relate the authorizations are defined by the system as authorization objects. (There is a summary of the authorization objects checked in the Account Management system in the online documentation).

This results in the following procedures:

...

       1.      Create a concept regarding which authorization profiles / roles you require and how you want their tasks to appear.

       2.      Execute the activities in the Account Management Customizing settings by choosing Basic Settings ® Authorizations:

¡        Maintain Authorization Types

You can use authorization types to determine maintenance authorizations for contracts, financial conditions and standing orders on the basis of the fields of the respective object.

¡        Define Field Groups Relevant to Authorizations

¡        Maintain Authorization Groups

¡        Define Authorization Check in BAPIs

¡        Generate and Assign Authorizations ( in other words, generate roles / profiles and assign users.

Result

The system users receive the authorizations they require.