6 7-users-authorization
TRANSCRIPT
Users & AuthorizationUsers must be setup and roles assigned to user
master records before you can use the SAP System.
A user can only log on to the system if he or she has a user master record. A user menu and authorizations are also assigned to the user master record via one or more roles.
Users in the R/3 Environment
Database Server
Dat
abas
eS
erve
r Operating System
Operating System
Operating System
Ap
pli
cati
on
Ser
ver
Pre
sen
t.S
erve
r
R/3 UserR/3 User
OS UserOS User
DB UserDB User
OS UserOS User
OS UserOS User
Admin. UserAdmin. User
Dispatcher
...VD B
The User Master Record
All user data required for R/3 System access is stored
in the user master recordin eight categories
Types of users
User master recordUser master record User master recordUser master record
Authorizations assigned?Authorizations assigned?
Objects needing protection Objects needing protection
Vendor
Company code Plant
Material
ActionAction
Transaction permitted?Transaction permitted?
Authorization Concept
Profile
Authorizationfor Task A
Authorizationfor Task B
Profile
ActionAction
Authorization Check
SAP GUI
OK?
AuthorityCheck
No
Processing
User Context
MessageYes
Dynpro
FinancialAccounting
Authorization
display, change
Customer company code: Authorization A
Customer company code: Authorization B
0001-0009
*
display
Object: Customer company code
Company Code
Activity
Authorization objectObjectclass
Object Fields Value Meaning
User Master Maintenance:Authorizations
(S_USER_AUT)
01 Create02 Change03 Display06 Delete07 Activate08 Display change documents22 Assign authorization profiles24 Archive
ACTIVITY
Authorization objects
Limited name space for the assignment of authorization names
AUTH
OBJECT
Central User Administration
Client 100
PRD System
Client 100Client 200
QAS System
Client 100 Client 200 Client 300
DEV System
With central user administration, the creation and maintenance of all user master data is performed in a single R/3 System
Information System