SAP PLM Recipe Development – what about Roles & Authorizations?
This blog belongs to a series of blogs regrouped on the SCN page “SAP PLM Recipe Development for Beginners”.
When you are implementing SAP Recipe Development, there is a phase in the project when you can’t avoid talking about roles & authorizations. We are raising two main questions:
- Anything special we have to consider for SAP Recipe Development (web-ui) in comparison to classical SAP ERP (SAP GUI) modules in this area?
- What are the most important authorization objects?
Web-ui related information
Type transaction NWBC in the SAP-GUI of your SAP system, you launch the Netweaver Business Client.
Here you select role SAP_PLMWUI_PROCESS_MENU2 and the Recipe Development Menu appears.
We now would like to understand how we can set up different menus for different users. We therefore call transaction PFCG in the SAP-GUI.
When we take a look at role SAP_PLMWUI_PROCESS_MENU2 and click on the tab “Menu”, we understand how we can change the menu (simply copying the role and deleting the entries which are not needed for a specific user).
By the way: if you highlight a menu entry here (e.g. Create Recipe) and then click on the highlighted symbol in the screenshot above, you can test your application.
List of SAP Standard Roles relevant for Recipe Development
Here is a list of SAP standard roles relevant for SAP Recipe Development.
|SAP_BCV_USER||Business Context Viewer User|
|SAP_BC_CUS_CUSTOMIZER||Customizing Project Team Member|
|SAP_PLMWUI_DEMO_ADMINISTRATOR||Access Control Context Administrator (for Pilot Implementation)|
|SAP_PLMWUI_DEMO_ADMINISTRATOR2||Access Control Context Administrator (for Pilot Implementation)|
|SAP_PLMWUI_ECN_DISPLAY||Display Change Number|
|SAP_PLMWUI_ECN_MAINTAIN||Maintain Change Number|
|SAP_PLMWUI_ECN_REUSE||Reuse Change Number|
|SAP_PLMWUI_ENGINEERING_MGR||Engineering Manager (ACC Authorizations)|
|SAP_PLMWUI_ENGINEERING_MGR2||Engineering Manager 2 (ACC Authorizations)|
|SAP_PLMWUI_MATERIAL_SPEC||Material Specialist (ACC Authorizations)|
|SAP_PLMWUI_NAVIGATOR||Object Navigator Authorizations for All PLM WUI Object Types|
|SAP_PLMWUI_OBJECT_ASSIGNER||Object Assigner (ACC Authorizations)|
|SAP_PLMWUI_PROCESS_MENU3||Recipe Developer 7.3|
|SAP_PLMWUI_PRODUCT_SPECIALIST2||Product Specialist (ACC Authorizations)|
List of SAP Authorization Objects relevant for Recipe Development
The exact authorization objects are of course always dependent on what function you are using in detail. The list below should however give you quite a good starting point covering most SAP RD areas such as: Specifications, Materials, Recipes, Documents, …
|C_AENR_BGR||CC: Change master - authorization group (Generate change number)|
|C_AENR_ERW||CC: Eng. change management - enhanced authorization check|
|C_CABN||Authorization for Characteristics Maintenance|
|C_CABN_GRP||Authorization group in characteristics|
|C_CLA_PROF||Profile maintenance/assignment of settings in classification|
|C_DRAD_OBJ||Create/Change/Display/Delete Object Link|
|C_DRAW_BGR||Authorization for authorization groups|
|C_DRAW_DOK||Authorization for document access|
|C_DRAW_STA||Authorization for document status|
|C_DRAW_TCD||Authorization for document activities|
|C_DRAW_TCS||Status-Dependent Authorizations for Documents|
|C_EHSB_STA||EHS: Status of objects|
|C_EHSO_GRP||Group management for EH&S objects|
|C_EHSP_TPP||EH&S: Phrase Item|
|C_EHSS_CDE||Display change documents|
|C_KLAH_BKL||Authorization for Classification|
|C_KLAH_BKP||Authorization for Class Maintenance|
|C_SHEP_TPG||EHS: Phrase Library and Phrase Group|
|C_SHES_TD2||EHS: Value Assignment Usage with Specification Type|
|C_SHES_TR2||EHS: Specification Header with Specification Type|
|C_SHES_TS2||EHS: Specification Status with Specification Type|
|C_SHES_TV2||EHS: Value Assgmt with Reference to a Spec. with Spec. Type|
|C_STUE_BER||CS BOM authorizations|
|C_STUE_WRK||CS BOM PLANT assignments|
|C_TCLA_BKA||Authorization for class types|
|M_MATE_MAN||Material Master: Data at client level|
|M_MATE_MAR||Material Master: Material Types|
|M_MATE_STA||Material master: Maintenance statuses|
|PLM_ECR||PLM authorizations for engineering records|
|PLM_R2B||Aythorization object Recipe to BOM synchronization|
|PLM_RCP||PLM authorizations for Recipe Development|
|PLM_RCPCVS||PLM central Authorization object for recipe versions|
|PLM_RCPTAB||Recipe view ID=*|
|PLM_RPRPPM||Recipe process parameter master data|
|PLM_SAM||PLM authorizations for status management|
|PLM_SPUSR||Super user per object type|
|S_SCMG_CAS||Case Management: Case|
|S_SCMG_FLN||Case Management: Authorization by Field|
|S_SCMG_STA||Case Management: Status|
|S_SCMG_TXT||Case Management: Text Notes|
|S_SRM_ARCH||SAP Records Management: Authorizations for Archiving|
|S_SRM_ST_N||SRM: Authorization Object for Status Network|
|S_SRM_ST_P||SRM Status Management: Auth. Object for Status Profile|
|S_SRM_STAT||SRM Status Management: General Authorization Object|
|S_SRMDISP1||Records Management: Circular|
|S_SRMGS_CT||Records Management: Authorizations for Document Content|
|S_SRMGS_DC||Records Management: Authorization for Documents|
|S_SRMGS_PR||Records Management: Authorizations for Attributes|
|S_SRMGS_VV||Records Management: Authorizations for Versions and Variants|
|S_SRMKCMNT||SRM - Keyword Catalog|
|S_SRMPATH1||SRM - Process Route|
|S_SRMRECST||Records Management: Record: Authorizations for Record Strctr|
|S_SRMSY_CL||SAP Records Management : General Authorization Object|