This window displays each employee with each of his/her permissions per object. Only employees who are linked to users in the Employee Master Data window can view this window and all other windows in the Authorizations folder.

Authorizations can be granted per user, so that the user has the same permissions throughout the system. Authorizations can also be individualized, so that each user has different permissions for different objects.

Since superuser authorizations cannot be altered, this user's permissions are viewed as grayed out. Employees that are linked to superusers have full permissions. All other users by default have no permissions.

Data ownership is driven by the owner field in business partners, sales opportunities, and sales A/R and purchasing A/P documents. The owner can only be an active employee that is associated to a user. Data ownership can be turned on or off either system wide, or by object, or even by individual window or report. A user can access the business partner, sales opportunity, and sales or purchasing document as long as he or she has a defined relationship with the owner and has been granted either Read Only or Full data ownership permission for that relationship.

The above relationships include:

For each of these relationships, the user can be granted Full, Read Only or No Authorization.

In the event that more than one relationship exists between the user and the owner, the more lenient authorization is granted. For example, the user and the owner are in the same branch and department. If the user has Read Only for the branch but Full authorization for the department, the user is granted Full authorization to the sales opportunity or sales or purchasing documents in question.

In the situation whereby different authorizations are granted to the same object, the more lenient authorization is granted. For example, if the user has Read Only authorization for Peer but Full authorization for Company, the user is granted Full authorization to the object company-wide.

To display this window, choose  Administration System Initialization Authorization Data Ownership Authorization .