Defining Authorizations

You define authorizations to grant users (groups or roles) the permissions to execute one or more permitted actions in the ES Repository.

Note Note

These activities are performed by a system administrator.

End of the note.

In the ES Builder, you can either define new or edit default authorizations for the objects in a folder, namespace, or software component version. The system checks for authorizations based on hierarchy. Firstly, the system checks authorizations for folders and then authorizations for namespaces and software component versions. If no authorizations are defined, the default setting takes effect.

You also have the option of defining authorizations by using user roles.

More information: Defining User Roles

Prerequisites

You have created users, roles, and groups in the central user management.
More information: User Management
You have activated the com.sap.aii.ib.server.acl.enable exchange profile parameter.
For more information about activating authorization checks, see Creating Users with Data-Dependent Authorizations

Procedure

Log on to the ES Builder.
To define new authorizations or edit the default settings, follow the steps below:
1. To define new authorizations, perform the following sub steps:
  1. Select a software component version, namespace, or folder in the navigation tree.
  2. In the context menu, choose Edit Authorizations.
2. To edit the default settings for authorizations, choose Tools Default Settings for Authorizations .
The Edit Authorization screen is displayed.
To create a new authorization, choose (Insert New Authorizations).
In the Type column, specify whether you want to assign authorizations to a user, group, or role.
In the Name column, select the name of the user, group, or role.
In the Permissions column, enter the permitted actions. You can choose from the following actions:
- Edit Authorizations - Modify the authorizations defined in the ES Builder
- Execute Reports - Run reports on the Process Component Interaction Models and assign usage profiles to users
- Write - Create, modify, and delete objects
If you want objects at the current level to inherit the authorizations assigned at a higher level, follow the steps below:
1. Choose (Inherit Selected Authorizations).
2. In the Select Selective Authorizations dialog box, select the authorizations that you want to inherit for the current level, and choose Apply.
To assign authorizations saved for the current object to all the substructures, for example all underlying folders, choose (Propagate All Authorizations to Substructures).
Choose Apply.