Authorizations for Knowledge Articles

[Former Member]

Authorizations objects for knowledge articles:

1. CRM_KNOART and CRM_ORD_PR:

These authorization objects are prerequisite to be assigned in the user role to be able to work and display Knowledge Articles in ITSM. The objects are part of the SAP standard template roles for ITSM.

If you copy the standard transaction type into custom namespace , it is necessary to adapt it in the object CRM_ORD_PR.

See documentation: http://help.sap.com/saphelp_crm70/helpdata/en/48/a44236ceb873e8e10000000a42189b/content.htm

CRM_KNOART is needed in addition to CRM_ORD_PR to access transactions that are not users own (CRM_ORD_OP) or accessible via organizational model (CRM_ORD_LP).

-> before SAP Solution Manager 7.1 SP5 note 1646048 seems to be necessary.

2. Authorization Scope --> CRM_AUTHSC:

Use case:

It is possible to define own status which define the access to specific knowledge articles.You can define KA for internal us only, for public or for high security areas only, or for any further scope that you might want to use.

Example: A Key user shall be able to display only KA with scope "public" He shall not be able to change them . The text type " internal notes " shall not be displayed anyway.

Configuration of authorization scope:

1. Define the different scope levels
   1. via IMG activity:
      Customer Relationship Management -> Master Data -> Knowledge Articles -> Define Authorization Scope

               or

    2. via SOLMAN_SETUP for incident management: -> step Optional Configuration -> Configure Manual

  2. Restrict visibility

The search for knowledge articles does not return any results if the following authorization is missing:
CRM_AUTHSC
ACTVT= 03 --> display;  02 = change, etc.
CRM_AUTHDM = KNOWLEDGEARTICLE
CRM_AUTHSC = <auth.scope maintained in knowledge article>  e.g. public ,internal

3. CRM_TEXT_ID:

You can restrict the text type in ITSM documents  which is displayed to the user  or not.

CRM_TEXT_ID is checked for knowledge articles as well as for other transactions.

Text profile KNOWARTI contains the following text types:

KADE	Knowledge Article Description
KAKW	Knowledge Article Keywords
S001	Problem Description
S004	Solution Description
0002	Internal note
A008	Log

Assign one or more text types in the authorization object to the appropriate user roles.

e.g. 'internal note' is a typical text type which shall not be visible to anybody.

Presence of these authorizations in the SAP standard roles:

Key User:

Processor:

Administrator: