Skip to Content
Business Trends
Author's profile photo Juergen Jakowski

What authorizations do you need in order to fully leverage SAP for Me?

Please Note: This blog post is outdated.

The new blog post is: What permissions do you need for SAP for Me?

(March 17th, 2021)

 

—– Old Blog Post ——————————————————————————————————-

Please have a closer look at my blog “What is SAP for Me?” if you are searching for some background on SAP for Me.

SAP for Me currently uses the S-User framework and its authorization concept, to control access to sensitive data. As SAP for Me introduces capabilities that leverage new data types, we also have introduced new authorizations to the existing S-User framework that can be granted to any S-User by super admins or – in some cases – by cloud administrators.

Please be aware that some authorization can ONLY be granted by either a super admin or cloud admin. We are currently working on a more transparend solution. Until further notice, you will find the required admin types to grant access in the tables below.

 

Exclusive authorizations for SAP for Me

The authorizations that are specifically created for SAP for Me are:

Authorization / Description Related capabilities in SAP for Me
Display Order Information
in SAP for Me
Allows a user to see all orders as well as all licensed materials.

To be granted by cloud admin only.

  • View list of all orders (incl. Start/End Date)
  • View list of orders related to a product
  • Inspect supplement documents related to an order
  • View list of license materials related to order
  • View list of license materials related to product
  • View list of purchased products with context details (licensed materials and orders)

Edit Contact-Role Assignment in SAP for Me

Allows a user to assign, change or delete customer contacts and roles.

To be granted by super admin and cloud admin.

  • Change assignment of a customer contact role related to a product

 

 

Additional authorizations for SAP for Me

SAP for Me also leverages existing authorizations that have been originally created in the context of the SAP ONE Support Launchpad. These authorizations are:

Authorization / Description Related capabilities in SAP for Me
Access License Utilization
for Cloud
Allows a user to see license consumption of cloud products.

To be granted by cloud admin only.

  • Inspect individual cloud license consumption
    in License Utilization Information tool
  • View list of consumptions of cloud product licenses (of all cloud metrics)
  • View contributing license materials per consumption (cloud products)
  • Highlight over-consumption situations for cloud products

Display All Incidents or Display Incidents

Allows a user to see incidents in SAP for Me

To be granted by super admin and cloud admin.

  • View list of all incidents
  • View list of my incidents
  • Inspect individual incident
    in SAP ONE Support Launchpad

Report an Incident or Send Incidents to SAP

Allows a user to create an incident in SAP for Me

To be granted by super admin and cloud admin.

  • Create new incident

 

Authorizations not in use (for now)

There are also some additional authorizations in place which are NOT used by SAP for Me for now.

Authorization / Description Related capabilities in SAP for Me

Display Company-Wide Learning Status in SAP for Me

Allows a user to see company-wide learning content.

To be granted by super admin and cloud admin.

Company-wide learning content to be expected in 2020

Edit Main, Technical or Financial Contact Person in SAP for Me

Allows a user to assign, change or delete order contacts and roles

To be granted by super admin and cloud admin.

Editable order contacts to be expected in 2020
Access License Utilization
for OnPrem
Allows a user to see license consumption of on-premise products.To be granted by super admin, only.
On-Premise consumption data to be expected in 2020
Display Software Agreement Information in SAP for Me

Authorization is subject to be deleted in the next cleanup

 

 

Authorizations vs. customer account

At the current point in time SAP for Me shows data based on the customer account that is linked to the given S-User. In the near future, we also plan to support account hierarchies known as CCoE Level in the S-User framework. As soon as we support account hierarchies, I will update this blog accordingly.

 

By the way. If you are interested, there is also a list of all authorizations that are available for an S-User in the context of SAP ONE Support Launchpad and SAP for Me available for your reference. Here you will also find more information in regards to the S-User framework in general.

Finally, if you are looking for S-user administrators on your side, don’t miss the “My Important Contacts” list in the SAP ONE Support Launchpad.

 

All the best,
JJ

Jürgen Jakowski
Chief Product Owner of SAP for Me

Twitter: @JJComment

Assigned Tags

      8 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Roland Koethnig
      Roland Koethnig

      Hello Jürgen,

      thanks for this blog. Where can I find the table showing the complete list of current authorizations relevant for SAP for Me in a better resolution. It is too small to read anything.

      Regards, Roland

      Author's profile photo Juergen Jakowski
      Juergen Jakowski
      Blog Post Author

      Hi Roland,

       

      thanks a lot for your comment and sorry for the little delayed response. For some reason, I didn't get a notification on that one... Hm...

      In regards to the list. You mean the table in the blog? Actually, I guess the list itself is big enough but it gets shrinked to fit the blog text. If you right click in the table and take "open in a new tab" it comes up in its orginal size: https://blogs.sap.com/wp-content/uploads/2019/07/Authorization_Table.png

      Does that help you?

      Beside the list above, a great alternative is https://support.sap.com/content/dam/support/en_us/library/ssp/my-support/help-for-sap-support-applications/concept-users_authorizations_administrators.html#authconcept. At the end of the table, there is a own SAP for Me section that also lists the authorization objects.

      Please just reach out to me again, if this all didn't help or if you have other questions. 🙂

      All the best,

      JJ

      Author's profile photo Juergen Jakowski
      Juergen Jakowski
      Blog Post Author

      Just for completeness. The first comment was refering to a table I uploaded as JPG. In the meantime the table is now a text table.

      Author's profile photo Juergen Jakowski
      Juergen Jakowski
      Blog Post Author

      Hi Gregory,

      very good catch and thanks a ton for the hint. I just realized that I didn't update this blog with the latest information.

      To see the invoices, you need the authorization "Manage Invoices and Payments". Please notice that invoices are currently for Canada customers only. Further countries are planned to be added on the next months / quarters.

      For the CPEA Balance Statment you need authorization "Display Order Information
      in SAP for Me"
      . We have extend the reach of this authorization as all this falls under the context of orders and licenses.

      I will update the blog in the next days and will add some additional aspects to it. Or maybe I will even write a new blog post about this.

      Again, thanks a lot for bringing this up! 🙂

       

      All the best,

      JJ

       

      Author's profile photo Victoria Waney
      Victoria Waney

      Hello JJ,

      I logged in, but can't access info on the cards. To get authorization I can send an email to the admin.

      Now when the admin gets my email requesting assigning authorizations, it is not clear what the admin needs to do. There is no link provided in the standard email text.

      So how to get access to all the systems, licenses and data without getting the admin mad about all those request emails with no next step defined clearly????? Thanks.

      Regards, Victoria

      Author's profile photo Juergen Jakowski
      Juergen Jakowski
      Blog Post Author

      Hi Victoria,

      Thank you for your feedback. And I directly understand the issue.

      When we developed this automatic mail template to S-User Super Admins, we assumed that Super Admins could respond to this mail very easily. Normally only the authorization name is missing, which we have integrated into the mail.

      However, I now realize that the text is not meaningful enough to help a Super Admin who may not work with S-User Administration on a daily basis, or is not yet familiar with the connection between SAP for Me and SAP ONE Support Launchpad.

      Interestingly, we have not received this, totally understandable feedback, so far. I will immediately take this to our team and have the text expanded accordingly.

      Thanks again for your feedback. This is the only way we can make SAP for Me better. 🙂

      All the best,
      JJ

      Author's profile photo Bogdan Dejeu
      Bogdan Dejeu

      Hi JJ,

       

      The link referenced on this page seems to lead nowhere these days. Any chance you have an updated one ?

      https://support.sap.com/content/dam/support/en_us/library/ssp/my-support/help-for-sap-support-applications/concept-users_authorizations_administrators.html#authconcept

      Thanks,

      Bogdan

      Author's profile photo Peter Kappelmann
      Peter Kappelmann

      Hi Bogdan,

      You may want to try https://support.sap.com/user-admin-concept, then click 'Authorization concept' in the table of contents.

      Best regards,
      Peter