SAP ABAP IMG Activity SIMG_BA-CA-SU03 (Generate and Assign Authorization)
Hierarchy
☛ EA-FINSERV (Software Component) SAP Enterprise Extension Financial Services
   ⤷ IS-B-BCA (Application Component) Bank Customer Accounts
     ⤷ FKB (Package) Bank Customer Accounts: Central Objects
IMG Activity
ID SIMG_BA-CA-SU03 Generate and Assign Authorization  
Transaction Code S_KK4_13000107   IMG Activity: SIMG_BA-CA-SU03 
Created on 19990830    
Customizing Attributes SIMG_BA-CA-SU03   Generate and Assign Authorization 
Customizing Activity SIMG_BA-CA-SU03   Generate and Assign Authorization 
Document
Document Class SIMG   Hypertext: Object Class - Class to which a document belongs.
Document Name SIMG_BA-CA-SU03    

In this section you can create roles, and with the help of the profile generator, generate profiles containing the required authorizations.

You define an authorization by listing the permitted business characteristics (bank area, condition area, product, for example) and the permitted editing functions (create, change, delete, for example) for a supplied authorization object. You can always define several authorizations for each authorization object.

Authorization Objects in the Current Account System

For the Bank Customer Accounts component we supply predefined authorization objects in the object class "Industry Solutions - Bank". These are described in detail in the online help. You define authorizations for these objects by entering your required values in the object fields.

Example

One of the supplied authorization objects is "BCA account: Bank areas". For this authorization object supplied by SAP it is defined that two entries are required for issuing an authorization:

  • a listing of the bank areas for which accounts can be edited
  • a listing of the activities that are permitted for editing accounts in the specified bank areas.

The possible activities such as create, change, display are defined in the system. Refer to the F4 help for details of all possible settings.

Most authorization objects have a similar structure, meaning that two entries are required for each: the first lists values for a field for the object being protected (bank area, for example), the second lists a series of activities. By combining these you can very clearly differentiate the activities. You can, for example, permit creating accounts only in one bank area but allow the display of accounts cross-bank area.

In the case of authorization objects for free attributes to which you can assign freely defined fields using authorization types, you can specify values for up to two fields of the authorization object, provided you have defined both fields (example: a combination of product and account name).

Activities

To assign an authorization profile to a user, proceed as follows:

  1. Create a role
  2. Enter a description
  3. Select transactions for the user menu if required
  4. Generate and revise authorizations
  5. Assign users and compare user master record.
    When doing so, the profile is entered in the user master records.
  6. Transport the roles, if necessary.

Note

You can use authorization profiles supplied by SAP or those created manually in roles. To do so, create an activity group without menu and then include the authorization profile in the authorization data of the role. Choose Edit -> Insert authorization -> From profile in step 4, to include the authorization profile data in the role.

Further notes

For details on the procedure, refer to the initial screen of the transaction under Short explanation.

Business Attributes
ASAP Roadmap ID 209   Establish Authorization Management 
Mandatory / Optional 2   Optional activity 
Critical / Non-Critical 2   Non-critical 
Country-Dependency A   Valid for all countries 
Assigned Application Components
Documentation Object Class Documentation Object Name Current line number Application Component Application Component Name
SIMG SIMG_BA-CA-SU03 0 I310005601 O  
SIMG SIMG_BA-CA-SU03 1 KFM0000005 FSCM In-House Cash 
Maintenance Objects
Maintenance object type C   Customizing Object 
Assigned objects
Customizing Object Object Type Transaction Code Sub-object Do not Summarize Skip Subset Dialog Box Description for multiple selections
PFCG T - Individual transaction object PFCG BACA00001 Maintain Authorizations with Profile Generator 
History
Last changed by/on SAP  20000723 
SAP Release Created in