The conception of authorization administration is based on the standard authorization administration inthe current account system. For documentation on this authorization administration, see the SAP Library under
Users and Roles (BC-CCM-USR)
.
You use authorization administration to represent authorization and areas of expertise. In the current account system, authorization objects are provided for
Online entry transactions
Reports
Customizing transactions
These can restrict the creation, change, display, locking, deletion, reversal, transfer posting, return, execution, and simulation of data or processes.
Thanks to the modular authorization concept of the system, you can define roles to suit the work centers of your employees. You can adapt authorization, for example, to suit a work center at which private customers or corporate customers are serviced, or to suit processing staff working in payment transactions.
These profiles contain various authorizations that you can use to define the business objects that your employees are allowed to process (authorization objects), and which processing functions are allowed.
You define the authorizations in the Implementation Guide (IMG). Choose
Authorization Administration.
The business objects to which you assign the authorizations are defined by the system as authorization objects. (This online documentation contains a summary of the authorization objects that are checked in the customer accounts system.)
This results in the following procedures:
Create a concept regarding which roles you need and how their tasks are to be defined.
Process the relevant activities in Customizing:
Maintain Authorization Types
You can use authorization types for the account, conditions, and means of payment management by using the fields of each object.
Specify Authorization Field Groups
Maintain Authorization Groups
This is not used if you are using the business function
Deposits - Business Operations (EAFS_BCA_BUSOPR)
Generate and Assign Authorization
If required, enter the
Amount-Dependent Authorizations
according to the bank area, product, transaction type, or notice category.
Note
Special features of authorization administration in the current account system
To protect access in the areas of amount notices and holds, you can assign differentiated, amount-dependent authorizations.
In these cases, you can specify amount limits under which the functions are allowed to be used. Additionally, you can specify here that a check in accordance with the principle of dual control is to apply when the limits are exceeded.
By assigning authorizations and roles, you give your employees the corresponding access and editing rights.