Custom Roles :
In order to grant other SAP CPS specific privileges to a user it is good practice to create roles. When an empty role is created, privileges can be granted to the role and then the role can be granted to all the users that are allowed the specified grants. The following steps are needed to create and use a new role in SAP CPS.
Create new role
First the role has to be created inside the SAP Netweaver User Administration using the following Naming Conventions. The role only needs a name. Nothing SAP specific has to be granted to the role.
Role Naming Conventions
Roles can also be granted to other roles or users. Roles assigned to roles create a hierarchy. The table below shows naming conventions for the definition of roles.
Naming convention: Z<SYSTEM>_<TYPE>_<FUNCTION>
<Criteria> Possible Entries Standard Format
<TYPE> End User
<System> SAP R3
<Function> Backup Operator
Finance End User
Expeditor End User
Activate the role in SAP CPS
To activate the role in SAP CPS the role has to be made visible to the SAP CPS system. This is done by logging on to the SAP CPS Central Server with a user that has the new role granted. When the user logs in all granted roles that are not available in SAP CPS will be added to the system.
It is possible to check if the role is active in SAP CPS by browsing to Security>Roles. Here the role should be visible now. It will show with description ‘Created automatically On first login’.
Now it is possible to grant different access levels to this role.