Proposal for a role concept for Test Management in SAP Solution Manager 7.2

Introduction

Test management is an important and central functionality in SAP Solution Manager.

Especially when you start, however, you wonder how exactly to set up and administrate this functionality.

The distribution of roles and authorizations in particular is a constant challenge. This blog describes which functional roles are useful and how they are implemented by the existing roles together with some additions. In addition, possible design options such as Fiori dashboards and limitations in the specific roles are discussed.

The division of functions described here has already been implemented in many cases by various users. Depending on the specific requirements, however, it can happen that individual functional roles may have to be cut differently, possibly combined or clearly restricted in their authorizations, but in principle this division has proved successful.

Attention! It is always possible that in future SPs, adjustments to the functions and security objects will be made, so it is important to always look in the corresponding Security Guide.

Functional roles

There are various functions in Test Management that are to be supported by corresponding roles.

1. Test Manager

The test manager conceps, plans and administrates the test environment, organizes the tests and creates the necessary reports. If there is no explicit Solution Manager application administrator, he or she is also responsible for the basic configuration of the test management and the setting of parameters. These can be:

Templates, status values, priorities, business partners

In addition, he or she coordinates the structure of the SolutionDocumentation with the departments and, if necessary, is also responsible for its creation in the Solution Manager.

2. Tester

The tester performs tests and documents the result. If there are any deviations, he creates error messages. The error messages are re-tested after the error has been successfully corrected. For this purpose, he has an overview of all his error messages and, if necessary, messages from his area of responsibility.

3. Test case designer

Creates the test cases in Solution Documentation. Depending on the organization in the company, it is often not desirable that it also changes structures in Solution Documentation.

4. Message Processor

This functional role is usually assigned to developers or error managers. They examine the messages set by the testers and respond to them. To do this, they need an overview of the messages and, if necessary, they must also be able to view the test cases.

The conversion of these functional roles into concrete SAP roles and authorizations requires information from the Application-Specific Security Guide, as can be found on the SAP Help page. In some cases, several roles must be combined and individual additional authorizations must be added so that all functions can be executed.

Implementation test manager

The test manager composite role should contain copies of the following SAP standard roles:

SAP_SM_FIORI_LP_EMBEDDED – Embedded Use of the Fiori Launchpad in SAP Solution Manager

SAP_SMWORK_ITEST – Roles for work center UI are navigation relevant.

In this role, you should consider whether the FIORI catalog and the FIORI group should be replaced by a catalog/group that has been adjusted accordingly. This means that only those tiles that are really necessary are displayed in the FIORI Launchpad. See also the blog entry: SAP Fiori Launchpad in SAP Solution Manager – Creating Your Own Tile Catalogs, Groups, and Roles.

A FIORI Launchpad can look like this:

It has proved advantageous to create a separate role for FIORI catalog and group only, which contains only the menu entries for a separate catalog and group.

Other required SAP roles that belong to this composite role are:

SAP_SM_KW_ALL – Knowledge Warehouse (full authorization)

SAP_SM_SL_ADMIN – Process Management Administration

SAP_STWB_2_ALL – Test Organizer: Test Plan Management and Evaluation

SAP_STWB_INFO_ALL – Solution Manager: Test Workbench Infosystem

SAP_STWB_SET_ALL – Solution Manager: Central Test Workbench Settings

SAP_STWB_WORK_ALL – Tester: Worklist

SAP_SUPPDESK_CREATE – Role for Support Desk Creator

SAP_S_RFCACL – Authorization Object S_RFCACL for SAP Solution Manager Setup

SAP_SUPPDESK_PROCESS – Role for Incident Management Processor

SAP_SYSTEM_REPOSITORY_ALL – Solution Manager System Repository – full authorizations

Implementation tester

For the tester it is important that the necessary menus and calls are simple, that he does not get too many rights and that he can still perform all functions.

Since the tester only needs his or her worklist and message processing, the FIORI menu can look much cleaner:

The tester composite role should contain copies of the following SAP standard roles:

SAP_SM_FIORI_LP_EMBEDDED – Embedded Use of the Fiori Launchpad in SAP Solution Manager

TM_FIORI_TESTER – Fiori Dashboard role for Tester

SAP_SMWORK_ITEST – Work Center: Test Suite

SAP_SM_KW_ALL – Knowledge Warehouse (full authorization)

SAP_SM_SL_DISPLAY – Solution Documentation Display

SAP_STWB_INFO_DIS – Solution Manager: Test Workbench Infosystem

SAP_STWB_WORK_ALL – Tester: Worklist

SAP_SUPPDESK_CREATE – Role for Support Desk Creator

SAP_S_RFCACL – Authorization Object S_RFCACL for SAP Solution Manager Setup

SAP_SUPPDESK_PROCESS – Role for Incident Management Processor

SAP_SYSTEM_REPOSITORY_DIS – System Repository Object Display

Implementation test case designer

The test case designer creates test cases in SolDoc. Depending on his or her role in the company, he or she can also be responsible for the structure in SolDoc or for the solutions themselves. A maximum variant of this role could look like this:

The test case designer composite role should contain copies of the following SAP standard roles:

SAP_SM_FIORI_LP_EMBEDDED – Embedded Use of the Fiori Launchpad in SAP Solution Manager

TM_FIORI_TCDESIGN – Fiori Dashboard role for Test Case Designer

SAP_SM_KW_ALL – Knowledge Warehouse (full authorization)

SAP_SM_SL_ADMIN – Process Management Administration

SAP_S_RFCACL – Authorization Object S_RFCACL for SAP Solution Manager Setup

SAP_SYSTEM_REPOSITORY_DIS – System Repository Object Display

If you want to further restrict this role, for example, if you only want to work with test documents but cannot change the structure, you can do this in a copy of the role SAP_SM_SL_ADMIN.

To do this, the SM_SDOC object should be adapted accordingly and an authorization group created that contains exactly the required authorizations. For more information, see the Security Guide in the section about the SM_SDOC object.

An example of how to separate different divisions or projects can be seen in my blog post:

Special permissions to separate projects or enterprise areas for test managers within a solution

Implementation message processor

The message processor – mainly a developer or dispatcher – should be able to process messages in IT – Service Management user interface. In addition, it is important that links to the test documents or test cases contained in the error messages can be called up.

The message processor composite role should contain copies of the following SAP standard roles:

SAP_SM_FIORI_LP_EMBEDDED – Embedded Use of the Fiori Launchpad in SAP Solution Manager

TM_FIORI_PROCESSOR – Fiori Dashboard role for Message Processor

SAP_SM_KW_ALL – Knowledge Warehouse (full authorization)

SAP_SM_SL_DISPLAY – Solution Documentation Display

SAP_STWB_INFO_DIS – Solution Manager: Test Workbench Infosystem

SAP_S_RFCACL – Authorization Object S_RFCACL for SAP Solution Manager Setup

SAP_SUPPDESK_PROCESS – Role for Incident Management Processor

SAP_SYSTEM_REPOSITORY_DIS – System Repository Object Display

If you would like to receive these tested and adapted roles together with a first test management setup and corresponding training courses as a service, please visit our Service page in the SAP Support Portal for further information.