Actions and the access to data are protected by authorization objects in
the SAP system. Authorization objects allow complex checks that involve multiple
conditions that allow a user to perform an action. The conditions are
specified in authorization fields for the authorization objects and are AND
linked for the check. Authorization objects and their fields have descriptive
and technical names.
An authorization is always associated with exactly one authorization
object and contains the value for the fields for the authorization object.
An authorization is a permission to perform a certain action in the SAP
system. The action is defined on the basis of the values for the individual
fields of an authorization object.
A role is primarily a functional description
The technical realization of the role, in the form of concrete authorizations is achieved through the authorization profile associated with the role.
What is a composite profile?
A set of profiles which are included under a single profile name is called as a composite profile (SU02)
How can you find missing authorizations? How can you solve?
By running the SU53 transaction.
Identify the authorization object where the required filed value is to be given and the do the same thru SU01 or PFCG.
skip to main |
skip to sidebar
Popular post
-
Definition This authorization object checks access to several Basis functions, for example, spool administration and monitoring. Def...
-
S_USER_PRO Definition Authorization object, which is checked during authorization maintenance. The check is made in the following pr...
-
A client copy does not "generate a new system". It is used to transferinformation between clients within the same system or to an...
Followers
Tip for Blogger
Blog Archive
Powered by Blogger.
Blogroll
 |
 |
 |
+ comments + 13 comments
Hoi, if you are talking authorizations you should in nowadays not talk about profiles and composite profiles and old fashioned transactions like SU02.
Authorizations should managed by minimum Profile Generator tool PFCG or better by using SAP GRC Access Controls to get rid of any SoD Conflict by the very beginning
I agree with Thomas. Maintaining authorizations through transactions is not the best practice these days and thus tools like SAP GRC.
Due the last months I recognized a (positive) change within the area of authorization concepts.
There are more customers that do understand that ERP (in most cases SAP) authorizations cannot stand alone. Authorizations have to be seen in a holistic scenario. We are than talking about Process Control Management, Idendity Management, Risk Management, but also Securing the Networks, Portals...
The HR department is / should be responsible for kind of "user-management".
So in nowadays, evern SAP authorizations can not be handeld only by some special trained administrators. The skills needed, are much higher, than the usage of handful of transactions..
Excellent post. All the three concepts have been explained in a great way and in a very simple language that is easy to understand. All my doubts have been cleared after reading this article. Thanks.
sap implementation guide
The Creating Experts is the leading trainer in SAP BASIS so, if you are looking for one here is the link
http://thecreatingexperts.com/sap-basis-training-in-chennai/
contact +91-08122241286
SAP BASIS training is provided in CHENNAI.
THE CREATING EXPERTS is one of the leading trainer in SAP who provides real time training
http://thecreatingexperts.com/sap-basis-training-in-chennai/
contact 8122241286
Nice blog....For a long time I was looking for SAP BASIS training in Chennai and got the link
THE CREATING EXPERTS is providing SAP BASIS training in real time
http://thecreatingexperts.com/sap-basis-training-in-chennai/
Contact 8122241286
SAP BASIS training is provided in CHENNAI.I personally got trained with them one of the best trainers in CHENNAI
THE CREATING EXPERTS is one of the leading trainer in SAP who provides real time training
http://thecreatingexperts.com/sap-basis-training-in-chennai/
contact 8122241286
Informative post...for a long time I was searching for a trainer in Chennai
And i landed with THE CREATING EXPERTS one of the leading trainer with real time training in Chennai
http://thecreatingexperts.com/sap-basis-training-in-chennai/
contact 8122241286 for more info.
SAP BASIS training is provided by THE CREATING EXPERTS
If you are looking for a real time trainer then take a look at the mail below
http://thecreatingexperts.com/sap-basis-training-in-chennai/
contact 8122241286
SAP basis training by THE CREATING EXPERTS
http://thecreatingexperts.com/sap-basis-training-in-chennai/
contact 8122241286 for more info.
If you are looking for SAP basis here is a real time trainer to get trained from.
Creating experts, A leading career development organization with live examples by corporate Experts.
SAP training by online and classroom training is provided
http://thecreatingexperts.com/sap-basis-training-in-chennai/
Contact 8122241286 SAP basis training in chennai
The Information you provided is very much useful for SAP Learners. This Information was very Interesting,
SAP training in Chennai by THE CREATING EXPERTS for SAP BASIS, take a look at the link below
http://thecreatingexperts.com/sap-basis-training-in-chennai/
contact 8122241286 for more info.