SAP ABAP IMG Activity OLQU-BG (Define Authorization Groups and Digital Signature)
Hierarchy
☛ BBPCRM (Software Component) BBPCRM
   ⤷ CRM (Application Component) Customer Relationship Management
     ⤷ CRM_APPLICATION (Package) All CRM Components Without Special Structure Packages
       ⤷ QI (Package) QM IMG and area menu
IMG Activity
ID OLQU-BG Define Authorization Groups and Digital Signature  
Transaction Code S_ALR_87004653   IMG Activity: OLQU-BG 
Created on 19981222    
Customizing Attributes OLQU-BG   Define authorization groups 
Customizing Activity OLQU-BG   Define Authorization Groups 
Document
Document Class SIMG   Hypertext: Object Class - Class to which a document belongs.
Document Name OLQU-BG    

In this step, you define the authorization groups for

You only need to process this step if you want to use the following authorization objects:

If you use the material authorization you can also do the following:

Recommendation

Using authorization groups requires a certain amount of organization. You must maintain authorization groups in the master data and issue appropriate authorizations to users. Use the authorization objects with due care.

Activities

  1. Decide whether you really want to use the authorization groups. If required, define suitable:
    • Material groups
    • Master data groups

      Define the keys for the authorization groups.

  2. Maintain the necessary authorizations and profiles for the user master records for those users who are to have authorization.
  3. Maintain the authorization groups in the relevant master data.
  4. Determine whether you need approval procedures for inspection lots, and if required, define the inspection lot creation procedure for each material group.
  5. Determine whether you need digital signatures. You can request a digital signature in the following circumstances:
    • When you draw physical samples
    • During results recording
    • At the usage decision

      Make the technical and organizational arrangements for this, as required.

  1. Specify a signature method for the circumstances in which a digital signature is required.
  2. Make sure that you make the required basic settings.
  3. Make sure that the user master records for the persons authorized to give digital signatures are properly maintained.

Further notes

Approval of Task Lists and Inspection Lots

In certain branches of the process industry (for example, the pharmaceutical industry), Good Manufacturing Practice (GMP) requires that certain master data and master data changes must be subjected to an approval procedure. Work orders can only be executed if they are controlled or explicitly approved using released master data. In the QM component these are:

  • The inspection plan (as a controlling master data object)
    To subject the inspection plan to an approval procedure, define a change rule and change type in the inspection plan header.
  • The inspection lot (in the context of a work order)
    To subject the inspection lot to an approval procedure, define an identification in the material authorization group for the inspection lot approval.

Digital Signature

Mainly in the pharmaceutical sector but also in other sectors, the rules of Good Manufacturing Practice (GMP) require that certain operations only be implemented, monitored, or approved by authorized users. In the QM component these are:

  • Confirming the physical-sample drawing
  • Saving characteristic inspection results
  • Saving a usage decision

The digital signature can be used as a technical tool for this. Authorized users can, for example, enter individual identification cards containing their user ID and password using a microchip card reader. Authorized users must enter a password if they want to save data. The system then checks whether this data matches the data from the user's master record before it saves the data in the database.

Recommendation

If you use a user signature with an external security product as a signature method, you should always work with a verification in the productive system. For signatures that do not have a verification, the validity of the user certificate is not checked. You should therefore only use this signature method for test purposes.

Further information

SAP Library for SAP ERP Central Component under Logistics -> Quality Management -> Quality Inspection -> Results Recording -> Processing of Inspection Results -> Digital Signature in QM

Business Attributes
ASAP Roadmap ID 209   Establish Authorization Management 
Mandatory / Optional 2   Optional activity 
Critical / Non-Critical 2   Non-critical 
Country-Dependency A   Valid for all countries 
Assigned Application Components
Documentation Object Class Documentation Object Name Current line number Application Component Application Component Name
SIMG OLQU-BG 0 HLA0009540 Quality Management 
Maintenance Objects
Maintenance object type C   Customizing Object 
Assigned objects
Customizing Object Object Type Transaction Code Sub-object Do not Summarize Skip Subset Dialog Box Description for multiple selections
V_TQ01E V - View SM30 Authorization Groups for QM Master Data 
V_TQ01B V - View SM30 Mat. Auth. Group, Insp. Lot Approval, Digital Signature 
V_TC91 V - View SM30 Signature Method 
History
Last changed by/on SAP  19991222 
SAP Release Created in