Best Practices for Setting Up Authorization in Process Control 10.0

  • by Amit Saini, Specialist Developer, SAP Labs India Pvt. Ltd.
  • October 13, 2014
Amit Saini explains how to set up authorization for different business users inside an organization using SAP Process Control. He also covers troubleshooting and best practices for different application scenarios in SAP Process Control.
Learning Objectives

Reading this article, you will learn how to:

  • Build roles and assign them to SAP Process Control entities
  • Configure different authorization modes
Key Concept

A business role needs to be assigned to users for all SAP Process Control application entities such as organization, sub-process, or a control via the front end. This is called an entity-level authorization check. To enable extra security, a business role can be defined at the user level via transaction code SU01 first, and then only the corresponding role can be assigned to a user for SAP Process Control entities. This is called second-level authorization and is optional.

Authorization determines access to master data and transactions for business users inside an organization. To implement such a security model, you need to understand the authorization model first. The authorization model can be split into two classifications:
  • Modeling authorization, including role building and authorization metadata
  • Run time execution of authorization checks

Amit Saini

Amit Saini is a specialist developer in SAP Labs India Pvt. Ltd. Currently, he is working with the IMS Organization (installed base maintenance support) for SAP Process Control 3.0, 10.0, and 10.1.; SAP Access Control 10.0; and SAP Risk Management 3.0. He has vast experience and worked on multiple technologies, including JavaScript, SAP UI5, HANA, ABAP WebDynpro, Workflow, BusinessObjects, Floor Plan Manager with ABAP WD, ABAP OO, Adobe Interactive forms, Adobe Flex Integration with ABAPWD, SAP ABAP Dictionary, function modules for a broad range of SAP modules, and SAP HR Organizational Management (Infotype, Time Constraint, Object Type, Subtype, Evaluation Path).

See more by this author


Comments

No comments have been submitted on this article. 


Please log in to post a comment.

To learn more about subscription access to premium content, click here.