how to plan sap authorization

[Former Member]

Hi, I would like to find out about sap authorization roles for mySAP erp2005. I would like to plan what transaction code for which user role before the system installation. Is there any template/ authorization list to assist in deciding what sap authorization to assign to user?

Appreciate any help.

[Former Member]

That is a big task / question.

Best practice (to my knowledge) in a simple way is to get yourself a Business Process Master List for mySAP erp2005 - a Blueprint of the business processes being used which matches the tasks in the business process to a standard SAP transaction code (or own customer transaction code as required).

Once you have the process documented in the list, define which positions / functions / roles in the company are performing which of these tasks in the process and pull the corresponding transaction codes to the tasks into a single role which has the name of the positions / functions / roles.

Of course you have to be carefull in your choice of transaction code for the task as you could be adding more access than just the original task, or combined with another transaction's authorization in the same role you could provide some unintended access.

See also the posts on maintaining objects and activities for transaction codes using SU24 / SU25. If you search OSS for "su24 f_bkpf_bup" it is explained quite nicely in one of the notes.