权限控制.docx

权限控制.docx

《权限控制.docx》由会员分享，可在线阅读，更多相关《权限控制.docx（16页珍藏版）》请在冰豆网上搜索。

权限控制

BizLinkAuthorityCheck

Author:

Leo

Date:

2010-12-15

Version:

1.0

Content

BizLinkAuthorityCheck1

Content2

SAPAuthorityCheckIntroduction3

Role3

CreateRole4

Menu6

Authorizations7

User11

CreateUser11

Assginpassword12

RolesAssign13

EvaluateAuthorizationCheck14

TransportofRoles15

SingleTransportofRoles15

MassTransportofRoles17

SAPLibraryreference:

20

SAPAuthorityCheckIntroduction

TheABAPauthorizationconceptprotectstransactions,programs,andservicesinSAPsystemsfromunauthorizedaccess.Onthebasisoftheauthorizationconcept,theadministratorassignsauthorizationstotheusersthatdeterminewhichactionsausercanexecuteintheSAPsystem,afterheorshehasloggedontothesystemandauthenticatedhimselforherself.

Thefollowinggraphicshowstheauthorizationcomponentsandtheirrelationships.

Role

StructureofRoleAdministration

CreateRole

Transaction:

PFCG

TransactionInheritance:

Wecaninheritancefromotherroletogetasamemenu.

Menu

AssgintransactionstothisroleatMenupage.

Authorizations

ChangeauthorizationdataatAuthorizationspage.

First,wemustdefineorganizationallevels.‘*’meansfullauthorization.

Afterassginorganizationallevelsdata,wecandoubleclicktheyellowlighttogetotherauthorizations.

Inadditiontothis,wecandefineeachauthorizationobjectdirectly.

Aftercompletionofassginauthorization,wemustgenerateprofile.

User

CreateUser

Transcation:

SU01UserMaintenance

Wecancreateanewaccountbyclickcreate.

Assginpassword

Wecanmaintenancepersonalinformationataddresspage.

Assginainitialpassword.

Setdefaultformat,outputdeviceandpersonaltimezoneatdefaultspage.

RolesAssign

WecanalsoassignroletoaccountsattransactionPFCG.

EvaluateAuthorizationCheck

Whenwegetafailedauthorization,wecanseeauthorizationcheckfailedattransactionSU53.

TransportofRoles

Wecanuserequestpackagetotransportroles.

SingleTransportofRoles

Transcation:

PFCG.

Makeanewrequest.

MassTransportofRoles

Transcation:

PFCG.

Thisisaselectoption.Wecanmakeacomplexselectionbyit.

Afterselection,assgintoarequestorcreateanewrequest.

SAPLibraryreference: