Summary | Managing User Authorization

In this chapter, we demonstrated how to use Profile Generator to create authorization profiles and objects. We also learned how to launch R/3 transactions and access Web sites from BEx Browser.

A larger organization will likely have staff members who specialize in authorization setup issues. In some cases, such an organization's authorization staff may need assistance from a BW technical developer as well if its authorization specialist is not familiar with BW. Smaller organizations may routinely depend on BW technical developers to set up authorization profiles and objects.

Key Terms

Term	Description
Authorization	An authorization defines what a user can do, and to which SAP objects. For example, a user may be able to display and execute, but not change, a query. Authorizations are defined using authorization objects
Authorization object	An authorization object is used to define user authorizations. It has fields with values that specify authorized activities, such as display and execution, on authorized business objects, such as queries. The maximum number of characters allowed for the technical name is 10.
Authorization profile	An authorization profile is a combination of multiple authorizations. The maximum number of characters allowed for the technical name is 10.
Profile Generator	Profile Generator is a tool used to create authorization profiles.
Role	In Profile Generator, an authorization profile corresponds to a role. A user assigned to the role automatically has the corresponding authorization profile. A user can be assigned to multiple roles. The maximum number of characters allowed for the technical name is 30.
RFC	Remote Function Call (RFC) is a call to a function module in a system different from the caller's system, usually another SAP system on the local network.