Tasks

You can use this role to execute the following:

Run reports for displaying event handler data

Enter and send event messages

Update event handler data by reporting events

Example

Defining authorization as an administrator to display a customer’s event handler data

A user’s authorization comprises a combination of role and authorization profile.

The role determines the activities a user can execute.

The authorization profile, which you define in SAP Event Management (SAP EM), determines the SAP EM data that a user can work with (create, display, change, or evaluate).

You use parameters to define the combination of role and authorization profile.

You define an authorization parameter in the authorization profile.

You define the same parameter in the role.

       1.      Defining roles

You define a roleZ_Smith(transaction PFCG) that is based on the role /SAPTRX/SAP_EM_USER.

You assign the following authorization data to the role.

Activity 03 (display event handler information for queries to SAP EM) for authorization object X_EM_EH

Parameter<SHIP_TO_PARTY>with value<Customer Smith>

For more information about users and roles, see the SAP Library under SAP Technology Components → SAP Web Application Server → Security (BC-SEC) → Users and Roles (BC-SEC-USR)

SAP EM Customizing

You have carried out Customizing for SAP EM (for example, defined control parameters, event handler types, and parameter mapping).

Defining an authorization parameter and assigning the authorization profile

You define control parameter<SHIP_TO_PARTY>as the authorization parameter<TRA10_CUSTOMER>

You assign the authorization parameter<TRA10_CUSTOMER>to an authorization profile<TRA10_DELIV>

You assign the authorization profile<TRA10_DELIV>to event handler type (EHT) <TRA10_DELIV>

For more information about defining authorization profiles, see the Implementation Guide (IMG) for Event Management → Authorizations and Filters → Define Authorization Profiles.

Consequence of the authorizations defined

Your user creates a shipment document that contains information about customer Smith.

The application system sends this information to SAP EM when saving the document.

SAP EM creates an event handler in accordance with Customizing.

Customer Smith requests data from SAP EM. He or she can see only event handlers with EHT <TRA10_DELIV> that have the authorization data Parameter <SHIP_TO_PARTY> equals <Customer Smith>

He or she cannot change or send this data, in accordance with your role definitionZ_Smith(see point 1).