SAP Authorizations Maintain authorization objects more easily - SAP Basis

Direkt zum Seiteninhalt
Maintain authorization objects more easily
Determine Permissions Error by Debugging
Every large company has to face and implement the growing legal requirements. If the use of an authorization concept is to be fully successful on this scale, the use of an authorization tool is unavoidable. For medium-sized companies, the use of an authorization tool is usually also worthwhile. However, decisions should be made on a case-by-case basis.

Are you using SAP NetWeaver Business Client instead of SAP GUI? The arrangement of the applications on the screen is controlled by PFCG roles. The SAP NetWeaver Business Client (NWBC) is an alternative to SAP GUI for access to SAP applications. This allows you to centrally access applications that reside in different SAP systems and have different UI technologies. The NWBC enables you to call not only transactions, but also Web-Dynpro applications and external service applications. In this tip, we will show you how to use PFCG roles to control the design of the NWBC user interface.
Maintain derived roles
Transaction SE63 allows you to translate a variety of text in the SAP system. You can find the relevant texts for the eligibility roles via the menu path: Translation > ABAP Objects > Short Texts In the pop-up window Object Type Selection that appears, select the S3 ABAP Texts node and select the ACGR Roles sub-point.

You can also find some useful tips from practice on the subject of SAP authorizations on the page www.sap-corner.de.

A temporary shutdown of Central User Management is usually not recommended. However, in certain cases it may be necessary. We will show you what pre- and post-processing is required to avoid data inconsistencies. In complex SAP landscapes where the Central User Administration (ZBV) is used, there may be cases where you want to temporarily remove a subsidiary system from the ZBV without having to delete this system or shut down the entire ZBV, for example if you want to create users in a subsidiary system at short notice.

"Shortcut for SAP systems" is a tool that enables the assignment of authorizations even if the IdM system fails.

You have developed applications yourself and would like to maintain suggestion values for them? The easiest way to do this is with the help of the permission trace.

So much information... how can you keep it so that you can find it again when you need it? That's what Scribble Papers is great for.

In this tip, we focus on the technical implementation of the authorisation check implementation.
SAP BASIS
Zurück zum Seiteninhalt