Best Practices for Setting Up Access Control Engine 7.0

  • by Hansen Chen, Manager, PMP, PricewaterhouseCoopers
  • June 9, 2010
Learn the concepts and architecture behind Access Control Engine (ACE) 7.0. Follow step-by-step configuration and coding instructions on setting up the ACE from start to finish. Find out everything you need to configure in your system using a simple but common example.
Key Concept
The Access Control Engine (ACE) is a technology that SAP developed in SAP CRM to control the objects that a user can access based on various criteria. The objects that the ACE can control include business partners, business transactions, products, and some marketing objects. The criteria to control the user access are very flexible. SAP provides a framework on which you can develop your own code to fit your business need.

The Access Control Engine (ACE) plays an important role in your SAP CRM system because traditional role-based authorization can’t always fulfill complicated business requirements. Compared to transaction PFCG (maintain SAP roles) roles, the ACE provides authorization on a much more granular control level. You can base your control on the master data, the relationship between master data, the transaction data, or even the logic/relationship defined by your own custom requirements.

The ACE is especially useful in the business context of a channel partner portal because a channel partner logs on to the supplier’s website to place the order. Each channel partner should only see its own customers or transactions. I elaborate on the steps you need when you want to use the ACE to control the object-level authorization for your project and you want to maximize your flexibility using customer coding. I use a simple example in which you want to manage the authorization of four customers belonging to two dealers. The two dealers should only have access to their own customers. The configuration and coding in the example are all based on SAP CRM 7.0 (though it is worth noting that some of the features I mention are available starting in SAP CRM 5.0). 

Hansen Chen

Han (Hansen) Chen is a manager with PricewaterhouseCoopers’ SAP CRM practice. He has more than seven years of experience in the SAP CRM field and has finished more than 10 SAP CRM projects, on most of which he played a technical lead role. His project management experience includes managing more than 10 onsite/offshore developers and managing multiple project development teams in parallel. Han holds a PMP certification and has profound knowledge of CMMI methodology. He earned his bachelor’s degree in MIS from Tongji University, China.

See more by this author


No comments have been submitted on this article. 

Please log in to post a comment.

To learn more about subscription access to premium content, click here.