0

SAP AG 1999
Authorization Management and Roles
Contents:
Overview of roles
Travel Management roles
Copying roles
Creating or postprocessing authorization profiles
Authorization obect !": Trip data
Authorization obect fields and values
Assigning roles to users
(C) SAP AG AC270 11-1
0#$
SAP AG 1999
At the conclusion of this unit% you will be able to:
&nderstand the bac'ground of the authorization concept
&nderstand the roles concept
&se the Travel Management roles
Maintain the authorization obect !": Maintain travel
e(penses
Authorization Management: Obectives
(C) SAP AG AC270 11-2
0#)
SAP AG 1999
Course Overview
Overview
*ntry and Approval of Trips
+ettlement% ,ayment and ,osting of Trips
,er -iems.!lat Rates /0en#1
The *uro
Optical Archiving
2umber Ranges and Master -ata
for Travel Management
Reimbursements: Travel Costs
,er -iems.!lat Rates /Customizing1
-ialog and +ettlement Control
!orm +tructure
+ettings for "nterfaces
Authorization Management and Roles
Reporting
3R Master -ata /Mini Master1
Appendi(.+ystem "nfrastructure
Course Overview -iagram
(C) SAP AG AC270 11-3
0#4
SAP AG
R
Authorization Concept
&ser
Obect
Obect
!ield
!ield
+A,
Composite profiles
Composite profiles
,rofiles
,rofiles
5alue
5alue
&+*R
Authorization
Authorization
Users can be assigned one or more profiles, or composite profiles. A profile contains authorizations
for individual objects in the Travel Management module.
In an authorization for an object, you specify values for certain fields. In the program, the current
values at the time when the program is run are actually checed against these specified values.
If a user e!ecuting a program has an authorization for an object, with the re"uired values, in one of
his profiles, he has the relevant authorization.
In the standard version, Travel Management supplies you with the model profile P_TRV_ALL. It
contains all travel authorizations and can be used as a reference for the assignment of your
authorizations and adapted to suit your re"uirements.
(C) SAP AG AC270 11-4
0#6
SAP AG 1999
!ields 5alues
/Authorization e(ample1
72ew status7 when saving
Company code
Cost center
*mployee group
*mployee grouping for Travel Management
*mployee subgroup
Operation and 7Old status7
Organizational 'ey
,ersonnel area
,ersonnel number chec'
)8
9
9
9
9
9
: %R9 %:)8
9
9
O
Authorization Obect
For Travel Management there i the a!thori"ation o#$e%t FI: Trip data &hi%h 'rovi(e )o!
&ith a%%e 'rote%tion in regar( to travel e*'ene an( (ialog %ontrol o+ tri' (ata,
The a!thori"ation o#$e%t FI: Trip data %ontain 10 +iel( ()tem element &hi%h re-!ire
'rote%tion). +or &hi%h )o! %an aign a!thori"ation (val!e), The val!e in a +iel( are
%he%/e( via an 01 lin/,
2o! %an (e+ine an) n!m#er o+ a!thori"ation +or an o#$e%t, 2o! tore the n!m#er o+
'ermii#le val!e +or the +iel( in the o#$e%t,
A !er %an onl) 'er+orm an a%tion +or travel e*'ene i+ he !%%e+!ll) 'ae the
a!thori"ation %he%/ +or ea%h +iel( tore( in the o#$e%t,
(C) SAP AG AC270 11-3
0#;
SAP AG 1999
72ew status7 when saving
)8
means
8# place Re<uest status
$# place +ettlement status
Operation and 7Old status7
:)8
means
8# place Operation
$# place Re<uest status
)# place +ettlement status
!ield A&T3+
!ields and 5alues
5alues
5alues !ield A&T3!
4*am'le +or the %hara%teriti% val!e +or the a!thori"ation +iel( A5T6S7
21 1e-!et a''rove(. to #e ettle(
38 Tri'
4*am'le +or the %hara%teriti% val!e +or the a!thori"ation +iel( A5T6F7
141 1ea( an a''rove( tri' that i to #e ettle(
9 Create a ne& tri'
922 Change an a''rove( re-!et that i ettle(
:18 :elete a re-!et
;41 Settle an a''rove( tri' that i to #e ettle(
For more (etaile( in+ormation. ee the (o%!mentation +or the re'e%tive +iel(,
(C) SAP AG AC270 11-<
0#=
SAP AG 1999
>All> personnel
numbers
can be maintained
&ser can maintain
>all> personnel
numbers e(cept
his own
&ser can only
maintain his
own personnel
number
,ersonnel number chec' /A&T3,1
,ossible values
O
9
*
Assignment &ser 2ame ? ,ersonnel 2umber
=+ a !er i onl) !''oe( to 'ro%e tri' (ata +or hi o&n 'eronnel n!m#er or +or %ertain
'eronnel n!m#er. thi %an #e %ontrolle( via the a!thori"ation o#$e%t FI Travel expenses in
the Personnel number check a!thori"ation +iel(, The +ollo&ing val!e %an #e aigne( to
thi +iel(7
0 The !er %an onl) maintain hi o&n 'eronnel n!m#er
4*am'le7 (e%entrali"e( %on%e't
4 The !er %an maintain all 'eronnel n!m#er e*%e't hi o&n
4*am'le7 (e'artment o++i%e
8 All 'eronnel n!m#er %an #e maintaine(
4*am'le7 %entral %on%e't
=+ )o! &ant to (e+ine the %hara%teriti% O or E in the a!thori"ation +iel( Personnel number
check +or a !er. )o! m!t have entere( the lin/ #et&een 'eronnel n!m#er an( the
%orre'on(ing !er in the =n+ot)'e Communication (0103). !#t)'e SAP System system
user name !!!"#,
(C) SAP AG AC270 11-7
0#@
SAP AG 1999
&nderstand the basics of the authorization and
roles concepts
Maintain the Travel Management authorization
obect and use role?based menus
Authorization Management: Review
Aou are now able to:
(C) SAP AG AC270 11->