Authorization Concept Guide - SAP Solution Manager 7.2 …

1 Security GuideCUSTOMERD ocument Version: 2016-12-19 Authorization Concept Guide - SAP Solution Manager SPS 4 Content1 Security Guide - General Target Group of This How to Use this Using SAP Solution Manager as a Service Changes and News in General Concept : Document Overview: Overview: Solution Manager Functions Overview: Third Party Products to Be Used with Solution Authorization Concept for SAP Solution User and Roles Concept in SAP Solution PFCG Roles Types Delivered in SAP Solution Authorization Object Authorization Object Status in Authorizations and Roles for User Interfaces in SAP Solution Fiori Application Center Navigation Role for User Guided Procedure Using SAP Solution Manager with Java Using SAP Solution Manager with Customer Relationship Management (CRM).

2 50 CRM Web Client UI Navigation Authorization Concept in SAP Solution Using SAP Solution Manager with Business Warehouse (BW)..53 General - Reporting Data of BW and Activation of BW - Content (Step by Step)..55 Diagnostics - Reporting Authorizations and BI - Dashboards for BI - Using the Help Critical SAP BASIS Authorization RFC: Authorization Objects S_RFCACL and Concept Guide - SAP Solution Manager SPS 4 ContentFunction Calls: Authorization Object S_RFC and Maintenance: Authorization Objects S_TABU_DIS, S_TABU_NAM, and Objects: Authorization Object Authorization Objects S_START, S_TCODE, and Security: Authorization Object S_SECPOL(_A).

3 Authorization Object How to Build Your Own Authorization Creating Configuration User Roles for SAP Solution Manager Using IMG Concept Guide - SAP Solution Manager SPS 4 ContentCUSTOMER31 Security Guide - General ConceptsUseCautionUsage Rights for SAP Solution ManagerFor Usage Rights, check the following information in the Service Marketplace at: Security Guide is updated in the SAP Service Marketplace at: ComponentsSAP Solution Manager <current release>) with every Support any issues with security, authorizations, roles, and user management for SAP Solution Manager use you start the implementation and configuration of SAP Solution Manager , make sure you have the latest version of this document.

4 You can find the latest version at the following location: SAP ComponentsSAP Solution Manager <current release>.The following table provides an overview of the most important document Concept Guide - SAP Solution Manager SPS 4 Security Guide - General ConceptsTable 1:Support Package Stacks(Version)DateDescriptionSP012015 / 12 / 11 General Information As of Release , the security information is published within four separate guides: SAP Solution Manager Authorization ConceptThis Guide contains all information referring to the general Concept of se curity and authorizations for the complete stack for SAP Solution Manager .

5 SAP Solution Manager Secure Configuration GuideThis Guide contains all information referring to security aspects, users, User Management, authorizations, Role Management used in transactions SOLMAN_SETUP and SMUA. In addition, users and Authorization for the mi gration procedure for the process documentation are included. SAP Solution Manager Application Security GuideThis Guide contains all information referring to security aspects and au thorizations for individual Process Documentation Functionality Obsolete Transactions and AuthorizationsTransactions SOLAR01, SOLAR02, SOLAR_PROJECT_ADMIN are obso lete.

6 All relevant authorizations and roles are obsolete. New roles are deliv ered SAP_SM_SL_* (process documentation) and SAP_SM_KW_* (Docu ment Management). For more information, see sections on Authorization and Roles for Infrastructure and Process Documentation (see Application - Specific Guide ). All formerly relevant Authorization objects for Process Documentation are contained in roles SAP_SOLPRO_OLD with full Authorization and SAP_SOLPRO_DISP_OLD with display Authorization . Solution Content Activation (Migration) InformationInformation on the migration of existing projects and solutions to the new process documentation functionality is given in the Landscape Setup Guide .

7 Secure Center Role Navigation Concept All roles SAP_SMWORK_BASIC_* are obsolete, see sections on Work Center Navigation Roles and Authorizations for User All single roles calling ABAP WebDynpro Application receive new start transaction Authorization object S_START, due to new SAP Basis Release , see section on User Interface Object Status New section describing Authorization objects status in role for SAP Solu tion Manager (Software Component ST)Critical Authorization Objects extension of existing sections on SAP_BASIS Authorization objectsAuthorization Concept Guide - SAP Solution Manager SPS 4 Security Guide - General ConceptsCUSTOMER5 Support Package Stacks(Version)

8 DateDescription additional section on Solution Manager Authorization object SM_SETUPSAP Fiori User Interface / NWBC SAP Fiori User Interface can be used with SAP Solution Manager , see sec tion on User Interfaces in SAP Solution Fiori Launchpad can be called from the My Home work center. Assign role SAP_SMWORK_MYHOME to your respective users. Some scenarios, such as ITPPM, require NWBC as a User Interface in addi tion to SAP Fiori Launchpad and Tiles. The transaction is included in role : Authorizations and Roles for Infrastructure Authorization object AI_LMDB_PS is obsolete, and only included in roles SAP_SYSTEM_REPOSITORY_* with ACTVT 03 (Display) Information on Embedded Search functionality, (used in a number of sce narios)Dashboard Builder New framework for Dashboards delivered and new roles for it, see section Using SAP Solution Manager with Business Warehouse (BW).

9 NoteThe following roles as of Release are obsolete: SAP_SM_DASHBOARDS_DISP_ALM SAP_SM_DASHBOARDS_DISP_CIO_BPO SAP_SM_DASHBOARDS_DISP_EEM SAP_SM_DASHBOARDS_DISP_LMDB SAP_SM_DASHBOARDS_DISP_SAM SAP_SM_DASHBOARDS_DISP_VBDSP02 SAP Fiori User Interface added information in regards to VSCAN Documentation for upload of Concept Guide - SAP Solution Manager SPS 4 Security Guide - General ConceptsSupport Package Stacks(Version)DateDescriptionSP032016 / 08 / 15 SAP Fiori User Interfaceadded information in regards to.

10 Calling an application independently refinement of SAP Fiori tile groups for specific purposes adding additional SAP Fiori relevant servicesGuided Procedure FrameworkAdapted role SAP_SM_GP_ADMIN (new transaction DSWP_GPC_FAR): Authorization and Roles for Infrastructure Added information regarding Digital Signature for Test Plan Users Created in Earlier ReleasesCautionPlease check passwords for default users created within transaction SOLMAN_SETUP in earlier releases. See SAP Note Builder Framework reduced role scope from separate application specific dashboard builder roles to one display Dashboard role for all applications.