Show TOC

Procedure documentationCreating a Role Locate this document in the navigation structure

Procedure

To create a role:

  1. In the navigation bar of the Role Management tab, choose   Roles   Create  .

    The Create Roles screen appears.

  2. In the System Landscape dropdown list, select the appropriate system landscape.

    A system landscape is a collection of systems.

  3. In the Role Type dropdown list, select either a Single or Composite role type.

    • Single and composite role types are available for SAP ABAP landscape types

    • Single role types are available for non-SAP landscape types

    • Composite role types are available for Enterprise landscape types.

  4. In the Business Process dropdown list, select the appropriate business process for the role.

  5. In the Subprocess dropdown list, select the subprocess associated with the business process that you defined.

  6. In the Project/Release dropdown list, select the project or release to associate with the role.

  7. In the Role Name field, enter the name of the role.

    We recommend that you name the role name with a predetermined naming convention based on your company's policy. The system automatically populates the role name with this naming convention. The values that you enter in the system landscape and role type fields trigger the populated role name.

  8. In the Description field, enter a short description of the role.

  9. In the Profile Name field, enter the profile name of the role. If SAP ABAP roles are left blank, the profile name is system-generated.

    A profile is SAP-specific and is associated with a role. You can also connect a profile to the naming convention set up by the Enterprise Role Management Administrator during configuration. You can have multiple profiles in a role.

  10. In the Profile Description field, enter a short description of the profile.

  11. In the Critical Level dropdown list, select the appropriate critical level for your request.

  12. Under the Detailed Description tab, enter a detailed description of the role.

    Most users add a complete role description, including the business implication of the role and the tasks involved for the role. However, you can add any pertinent role information since this field permits an unlimited number of characters.

  13. Choose the Functional Area tab. Select the Add icon to add a functional area.

    A functional area is a classification of processes for a department and used as an additional attribute to classify roles.

  14. Choose the Approvers tab to view a list of approvers and alternate approvers assigned to this role.

    Next to the Approver and Alternate Approver fields are two additional fields with checkboxes for Role Owner, and Approver (Provisioning):

    • You choose the Role Owner checkbox to designate the listed Approver as the Role Owner

    • You choose the Approver (Provisioning) checkbox to designate the listed Approver as the Approver (Provisioning). .

      Note Note

      The Approver (Provisioning) can be defined for provisioning in the Compliant User Provisioning capability as the role approver in the context of provisioning. And, you can import the role information to CUP for provisioning purposes.

      End of the note.

    The list is a default list of approvers, assigned when Enterprise Role Management matches role attributes with approval criteria. You can assign new approvers during the role change process.

    Note Note

    The default list is present only if configured.

    End of the note.

  15. Choose the Custom Attributes tab. Select the Add icon to add custom attributes.

    Custom attributes are custom fields that you can configure to define an attribute for the role.

  16. Choose Save.

    When you save a role, the following options are available:

    • Change History

    • Authorization Data

    • Change or assign approvers

    • Change or assign function areas.

    Note Note

    The actions you can perform have been predetermined during the methodology process creation phase of Enterprise Role Management configuration.

    End of the note.