PRINT FROM SAP HELP PORTALDocument:Authorizations

File name:erp2005_ehp_05_en_d8_124c62ed4c441eafcd5fb0692b5c1d_content.pdf

URL:http://help.sap.com/erp2005_ehp_05/helpdata/en/d8/124c62ed4c441eafcd5fb0692b5c1d/content.htm

Date created:December 18, 2012

© 2012 SAP AG. All rights reserved. No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG. Theinformation contained herein may be changed without prior notice. Some software products marketed by SAP AG and its distributors contain proprietary software components ofother software vendors. Microsoft, Windows, Excel, Outlook, and PowerPoint are registered trademarks of Microsoft Corporation. IBM, DB2, DB2 Universal Database, System ads,System i5, System p, System p5, System x, System z, System z10, System z9, z10, z9, iSeries, pSeries, xSeries, zSeries, eServer, z/VM, z/OS, i5/OS, S/390, OS/390, OS/400,AS/400, S/390 Parallel Enterprise Server, PowerVM, Power Architecture, POWER6+, POWER6, POWER5+, POWER5, POWER, OpenPower, PowerPC, BatchPipes,BladeCenter, System Storage, GPFS, HACMP, RETAIN, DB2 Connect, RACF, Redbooks, OS/2, Parallel Sysplex, MVS/ESA, AIX, Intelligent Miner, WebSphere, Netfinity,Tivoli and Informix are trademarks or registered trademarks of IBM Corporation. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Adobe, theAdobe logo, Acrobat, PostScript, and Reader are either trademarks or registered trademarks of Adobe Systems Incorporated in the United States and/or other countries. Oracle is aregistered trademark of Oracle Corporation. UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group. Citrix, ICA, Program Neighborhood, MetaFrame,WinFrame, VideoFrame, and MultiWin are trademarks or registered trademarks of Citrix Systems, Inc. HTML, XML, XHTML and W3C are trademarks or registered trademarks ofW3C ®, World Wide Web Consortium, Massachusetts Institute of Technology. Java is a registered trademark of Sun Microsystems, Inc. JavaScript is a registered trademark of SunMicrosystems, Inc., used under license for technology invented and implemented by Netscape. SAP, R/3, xApps, xApp, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAPBusiness ByDesign, and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany andin several other countries all over the world. All other product and service names mentioned are the trademarks of their respective companies. Data contained in this documentserves informational purposes only. National product specifications may vary. These materials are subject to change without notice. These materials are provided by SAP AG and itsaffiliated companies ("SAP Group") for informational purposes only, without representation or warranty of any kind, and SAP Group shall not be liable for errors or omissions withrespect to the materials. The only warranties for SAP Group products and services are those that are set forth in the express warranty statements accompanying such products andservices, if any. Nothing herein should be construed as constituting an additional warranty.

PUBLIC© 2012 SAP AG. All rights reserved.

Page 1 of 2

Authorizations Standard Roles

The following table shows the standard roles that are used by the EC-CS component.

Standard Roles

Role Description

SAP_AUDITOR_BA_EC_CS AIS – Consolidation

SAP_AUDITOR_BA_EC_CS_A AIS – Consolidation (Authorizations)

SAP_EC_CS_FUNCTIONS_DETAIL Consolidation – Detail Functions

SAP_EC_CS_FUNCTIONS_GENERAL Consolidation – General Functions

SAP_EC_CS_OFFLINE_DATA_ENTRY Consolidation – Offline Data Entry with Microsoft Access

SAP_EC_CS_RECONCILIATION Consolidation – Reconciliation of Integrated Data

SAP_EC_CS_REPORT_ALL Consolidation – All Reports

SAP_EC_CS_REPORT_CONSDATA Consolidation – Reports with Consolidated Data

Standard Authorization Objects

The table below shows the security-relevant authorization objects that are used by the EC-CS component.

Standard Authorization Objects

Authorization Object Description

E_CS_BUNIT Consolidation unit

E_CS_CACTT Consolidation tasks

E_CS_CONGR Consolidation group

E_CS_DEFRM SAP Consolidation: Data entry layout

E_CS_DIMEN Dimension

E_CS_ITCLG Consolidation chart of accounts

E_CS_JEFRM SAP Consolidation: Journal entry layout

E_CS_PERMO Monitor, opening/closing of periods

E_CS_RPTNG Reporting with ReportWriter/Report Painter and Drilldown Reports

E_CS_RVERS Version

For more information, see the Implementation Guide for Enterprise Controlling at Consolidation ® Preparing for Production ® Authorization Management.

For more information about authorization management for data entry with Microsoft Access, see the application documentation for Consolidation under Prerequisites in the SAP System as well as Preparations for Data Entry Using MS Access.

Authorization Profiles

The table below shows the security-relevant authorization profiles that are used by the EC-CS component.

Authorization Profiles

Authorization profile Description

E_CS_ALL Full Authorization for EC-CS

E_CS_DISPLAY Display Authorization for EC-CS

Critical Combinations

For the authorization objects E_CS_CACTT, E_CS_PERMO, and E_CS_BUNIT, the authorization for a consolidation group (field CONGR) implicitly includes thecorresponding authorization for all consolidation units contained in this consolidation group, even if the authorization for field BUNIT was not explicitly granted.

PUBLIC© 2012 SAP AG. All rights reserved.

Page 2 of 2