《ADM权限管理》PPT课件

(Read only)
Auth Group of Ven a/c Activity=*
AUT1
AUT2
AUT3
*
F_BKPF_BEK
(All)
Business Process Detailed Process
T-code & Description
Tick task/tx req'd
If required, state the field value control of authorization objects
R/3 Authorization
Concept & Design Hongyu.chen
Tools & Terminolo权gy限工具事务
User Master Job Roles Auth. Objects Authorizations 限对象) Auth. Fields Profiles 象) Transactions
Job Roles - Transactions Matrix
Job Roles name :-
XXX_FIN_ACCOUNTANT
Enterprise Job Role Financial Journals Processor Testing ID :
Password : (Under DEV 120)
FBD2 Change Recurring Entry
?
Mark Recurring Document for deletion
FBD2 Change Recurring Entry
?
Delete Recurring Document
F.56 Delete Recurring Document
?百度文库
Listing of recurring documents
角色是一个业务场景内进行的活动小组。例如，采购申请创建动作属于采购申请创建角色。
SU21
SU03 SU02 PFCG
每个角色都拥有自己的权限profile,它包含了自己 的若干个权限（authorizations）。每个权限指明 了具体的权限对象。
角色
包含 活动 ACTIV ITY 权限
ASSI GNED
Job Roles (PFCG)
Users (SU01)
核心概念理解
权限对象：就是对哪些对象，可 以有权限控制。这些对象可以是 分为两类——作业、操作（比如， TCODE） ；数据（比如，某个CC, 某个工厂）创建物料主数据
Comparing user master rec ords
Unit Test Result : OK - if success X - if failed
Processing Recurring Journals
Preparation of recurring journals
FBD1 Enter Recurring Entry
?
Change Recurring Document
Account type *
*
*
*
Maintain Account
Activity <&&> 02, 03, 76
02, 03, 76
*
*
Assignment Model
Auth Group of GL a/c Activity=03 0100-0199
0200-0299
0300-0399
*
F_BKPF_BES
FBS1 Enter Accrual/Deferral Doc.
?
Print Accrual Journals
FB03 Display document
?
Processing of GL Adjustment Journals
Enter parked journal
F-65 Preliminary Posting
角色，执行活动，需要权 限
Create User Master
ASSI GNED
Transactions
BUILD
Job Roles (PFCG)
INPUT
G E N E R A T E Authorization
USOBT USOBX (SU24) 权限对象事务
Job Roles – Transactions Matrixes
(SU01) 维护用户主数据 (PFCG) 创建角色
(SU21) 权限对象 (SU03) 权限 (基于权
(SU20) 权限字段清单 (SU02) 参数文件 (基于权限对
(SU24) 维护权限对象事务分配
.
人们执行的角色基于业务场景，在上面的例子，卡伦在采购业务场景中执行创建采购申请角色 一个人可以有多个角色，例如约翰，已分配的角色“服务代表” “创建采购申请”和“采购申 请释放”
Create User Master
ASSI GNED
Job Roles (PFCG)
Users (SU01)
G E N E R A T E Authorization
A S S I G N E D Profiles
CONTAINED
Create User Master
ASSI GNED
Transactions
F.15 ABAP/4 Report: List Recurr.Entries
?
Review recurring journals
FBD3 Display Recurring Entry
?
Processing of Accrual Journals
Update the accruals in system
Organization Level
Detail Act Grp :
ABC
PQR
XYZ
HQ
access allowed
Controlling area CA00
CA00
CA00
CA00
Company code ABC
PQR
XYZ
*
Business area A001, B001, C001 P001, Q001, R001 X001, Y001, Z001 *
?
Print Parked Journal
FBV3 Display Parked Document
?
Reversal of Journals
Print document for reversal
FB03 Display Document
?
Print the reversal document
FB03 Display Document