ndferro.blogg.se

Sap authorizations made easy
Sap authorizations made easy









The object type in this case is an organisational unit. The structural authorizations is widely used to grant access to parts of the organisational structure based on the evaluation path SBESX or O-S-P.īelow you will find an example of an dynamic structural profile, which uses the customized attribute of an HR partner to find a starting point in the organisational structure and then uses the evaluation path SBESX to drill down from the organisational entry point from where the user is assigned as an HR Partner. Structural authorizations are used to restrict access to employees and other object types in HCM. This document is intended to help HR and Security consultant to cope with the structural profiles and to help them set up a concept for their structural profiles, describe and document it before implementation.Ģ The technical intro to structural authorization and related objects. The list of business needs which could be solved with structural authorizations are unlimited and therefore we need to follow some methods for avoiding our structural profiles ends up as a patchwork. Employees should only have access to those training catalogs, which belongs to their division.Instructors should only have access to those learners who participate on their courses.We want our line managers substitute to have access to the managers employees except from ECM.In projects we want our project managers to have access to all service technicians.My HR partners should only have access to those employees they are responsible for.The technical set up of structural authorizations is covered in a huge amount of documents, so in this document I primarily focus on the structures and methods to use for avoiding they end up as a never ending patchwork.īut lets try to face the business needs which could be: We will in this document focus on thoughts and decisions, which must be brought up before setting up the structural authorizations so they will cover those business needs we commonly face as consultants. In 2006 Niels Knuzen started his own company and has since been focusing on authorizations, identity management and security. During these years he joined the global HCM customer group. In 2003 he swapped to a nordic dairy company as SAP HCM architect. Niels Knuzen worked as consultant for SAP Nordic where he participated in numerous global roll outs and worked as instructor on the SAP HCM academies. The author is a SAP HCM subject Matter Expert since 1997 where he started in SAP.











Sap authorizations made easy