Authorization Administration 

Use

Thanks to the modular authorization concept of the SAP system, you can define roles tailor-made to suit the work centers of your employees.

Each role contains a number of authorizations which you use to define which authorization objects your employees are allowed to edit, and which editing functions are permitted.

The current account system provides authorization objects for the following activities:

·        Background processes

·        Dialog functions

·        Reports

·        IMG activities

You will find a summary of authorization objects available in the current account system under Authorization Objects and Additional Authorization Objects in SAP In-House Cash.

Integration

Authorization administration in the current account system is based on the standard authorization administration in the SAP System. For more information, see Users and Roles (BC-CCM-USR).

Prerequisites

You have created a concept of the roles and tasks you require.

Activities

You process these functions in Customizing of SAP In-House Cash under Authorization Management.

Note the following peculiarities for amount-based authorizations and the principle of dual control:

·        You can specify default amount-dependent authorizations for payment items, payment orders and hold amounts. You can also define that a dual control check (a second user has to release payment) is carried out if the amount is exceeded.

·        You can also specify amount-dependent authorizations for IHC payment orders. You define authorization groups for this and use them in the authorization profile of the role. One authorization group corresponds to one amount limit in a particular currency. The authorization group MAX, delivered with the standard system, does not have an amount limit.

·        Apart from the amount-dependent authorizations, you can define a dual control check for IHC payment orders. This check is run if a specified amount is exceeded, but can also depend on the bank area and transaction type.

Therefore, the amount for the principle of dual control is in addition to the amounts in the authorization groups and is not dependent on the authorization profile.

Note the following specific constellation:

You are processing an IHC payment order that is subject to the principle of dual control.

You are authorized to carry out the action post payment order without principle of dual control.

In this case, the amount to which this authorization is assigned has priority over the amount defined for the principle of dual control.

For additional information on the different uses of payment orders and IHC payment orders, see IHC Payment Order Versus Payment Order.

Example

You agree on an authorization for customers, corporate clients, or processors for dealing with payment transactions.

...