Authorizations for Changing Data and Sending Event Messages 

Use

You define an authorization concept in SAP Event Management (SAP EM) to specify:

●      Which users are allowed to make which changes to data in the event handler list (event handler overview and event handler detail overview)

Only if you assign the appropriate authorizations to a user are they able to select the icons used for making changes in the event handler list (event handler overview and event handler detail overview).

●      Which users are allowed to send event messages to SAP EM

Activities

...

       1.      Create a new user or maintain an existing one.

       2.      Assign the user to role SAP_EM_ADMIN or create a new role.

Role SAP_EM_ADMINcontains all the authorizations that are necessary to change data in the event handler list and to send event messages (see also: SAP Event Management Administrator).

If you create a new role, note that the subobject (for example, IPAR for changing info parameters) and the activity (for example, 01 for changes) operate in combination with each other.

For example, you want a user to be allowed to both change and create info parameters, but only to delete control parameters.

To do this you create two roles: A role in which you allow the user to change and create info parameters and a role in which you allow the user to delete control parameters.

For more information about maintaining the user master record, see the SAP Library under SAP Technology Components → SAP Web Application Server → Security (BC-SEC) → Users and Roles (BC-SEC-USR).

Example

You want a user to be allowed to do the following:

●      Activate or deactivate event handlers

●      Create and change info parameters

●      Delete control parameters

You create two roles.

●      Role 1 is allowed to activate or deactivate event handlers and delete control parameters

Maintain the following in the user master record:

○       Authorization object X_EM_EH_CH (in authorization class EM)

○       Subobject CPAR for changing control parameters

○       Subobject ACT for activating event handlers

○       Activity 06 for deleting control parameters and activity 63 for activating the event handler status

●      Role 2 is allowed to create and change info parameters

Maintain the following in the user master record:

○       Authorization object X_EM_EH_CH (in authorization class EM)

○       Subobject IPAR for changing info parameters

○       Activity 01 for creating info parameters and activity 02 for changing info parameters

You assign the user to roles 1 and 2.