SAP Basis

Unit 11: Basics of User Administration ADM100
Group in User Master Record” (technical name: CLASS). The authorization
object S_USER_GRP protects the user master record. An authorization
object can include up to ten authorization fields.
An authorization is always associated with exactly one authorization
object and contains the value for the fields for the authorization object.
An authorization is a permission to perform a certain action in the SAP
system. The action is defined on the basis of the values for the individual
fields of an authorization object. For example: Authorization B in the
figure for authorization object S_USER_GRP allows the display of all user
master records that are not assigned to the user group SUPER.
There can be multiple authorizations for one authorization object.
Some authorizations are delivered by SAP, but the majority are created
specifically for the customer’s requirements.
Figure 131: Authorization Check
It is assumed here that the transaction call was successful. Data is entered
in the transaction. After confirmation, processing takes place in the work
process and an authorization check is performed, if required also “on this
data”.
Check: If the user has an authorization for authorization object XYZwith
therequiredvalues,theprocessingcontinues. Multiple authorization
objects are usually checked.
416 © 2003 SAP AG. All rights reserved. 2003/Q3