Authorization Objects and Roles Used by SAP MDG, Central Governance

Authorization Objects

The following authorization objects are used by all components of Master Data Governance.

Note Note

To obtain more detailed information about specific authorization objects proceed as follows:

Choose SAP Menu Tools ABAP Workbench Development Other Tools Authorization Objects Objects (Transaction SU21).
Select the authorization object using (Find) and then choose (Display).
On the Display authorization object dialog box choose Display Object Documentation.

End of the note.

Authorization Object	Description
MDG_MDF_TR	Master Data: Transport
MDG_IDM	Key Mapping
USMD_CREQ	Change Request
USMD_MDAT	Master Data
USMD_MDATH	Hierarchies
USMD_UI2	UI Configuration
DRF_RECEIVE	Authorization for outbound messages for receiver systems
DRF_ADM	Create Outbound Messages
CA_POWL	Authorization for iViews for personal object worklists
BCV_SPANEL	Execute Side Panel
BCV_USAGE	Usage of Business Context Viewer
MDG_DEF	Data Export
MDG_DIF	Data Import
S_DMIS	Authority object for SAP SLO Data migration server

Caution Caution

For information about component specific authorization objects, see the corresponding sections:

End of the caution.

Standard Role

Role	Name
SAP_MDG_ADMIN	Master Data Governance Administrator

This role contains authorizations needed for administrative tasks and for setting up a base configuration in all components of Master Data Governance. Some authorizations enable critical activities. If multiple users in your organization are entrusted with the administration and configuration of Master Data Governance, we recommend that you split the role into several roles, each with its own set of authorizations. The role does not contain the authorizations for the respective master data transactions.

Enterprise Search

To use the Enterprise Search users have to be assigned to the role SAP_ESH_SEARCH Enterprise Search Hub (Composite): Authorizations for searching.