Business Trends
What authorizations do you need in order to fully leverage SAP for Me?
Please Note: This blog post is outdated.
The new blog post is: What permissions do you need for SAP for Me?
(March 17th, 2021)
—– Old Blog Post ——————————————————————————————————-
Please have a closer look at my blog “What is SAP for Me?” if you are searching for some background on SAP for Me.
SAP for Me currently uses the S-User framework and its authorization concept, to control access to sensitive data. As SAP for Me introduces capabilities that leverage new data types, we also have introduced new authorizations to the existing S-User framework that can be granted to any S-User by super admins or – in some cases – by cloud administrators.
Please be aware that some authorization can ONLY be granted by either a super admin or cloud admin. We are currently working on a more transparend solution. Until further notice, you will find the required admin types to grant access in the tables below.
Exclusive authorizations for SAP for Me
The authorizations that are specifically created for SAP for Me are:
| Authorization / Description | Related capabilities in SAP for Me |
| Display Order Information in SAP for MeAllows a user to see all orders as well as all licensed materials. To be granted by cloud admin only. |
|
|
Edit Contact-Role Assignment in SAP for Me Allows a user to assign, change or delete customer contacts and roles. To be granted by super admin and cloud admin. |
|
Additional authorizations for SAP for Me
SAP for Me also leverages existing authorizations that have been originally created in the context of the SAP ONE Support Launchpad. These authorizations are:
| Authorization / Description | Related capabilities in SAP for Me |
| Access License Utilization for CloudAllows a user to see license consumption of cloud products. To be granted by cloud admin only. |
|
|
Display All Incidents or Display Incidents Allows a user to see incidents in SAP for Me To be granted by super admin and cloud admin. |
|
|
Report an Incident or Send Incidents to SAP Allows a user to create an incident in SAP for Me To be granted by super admin and cloud admin. |
|
Authorizations not in use (for now)
There are also some additional authorizations in place which are NOT used by SAP for Me for now.
| Authorization / Description | Related capabilities in SAP for Me |
|
Display Company-Wide Learning Status in SAP for Me Allows a user to see company-wide learning content. To be granted by super admin and cloud admin. |
Company-wide learning content to be expected in 2020 |
|
Edit Main, Technical or Financial Contact Person in SAP for Me Allows a user to assign, change or delete order contacts and roles To be granted by super admin and cloud admin. |
Editable order contacts to be expected in 2020 |
| Access License Utilization for OnPremAllows a user to see license consumption of on-premise products.To be granted by super admin, only. |
On-Premise consumption data to be expected in 2020 |
| Display Software Agreement Information in SAP for Me |
Authorization is subject to be deleted in the next cleanup
|
Authorizations vs. customer account
At the current point in time SAP for Me shows data based on the customer account that is linked to the given S-User. In the near future, we also plan to support account hierarchies known as CCoE Level in the S-User framework. As soon as we support account hierarchies, I will update this blog accordingly.
By the way. If you are interested, there is also a list of all authorizations that are available for an S-User in the context of SAP ONE Support Launchpad and SAP for Me available for your reference. Here you will also find more information in regards to the S-User framework in general.
Finally, if you are looking for S-user administrators on your side, don’t miss the “My Important Contacts” list in the SAP ONE Support Launchpad.
All the best,
JJ
Jürgen Jakowski
Chief Product Owner of SAP for Me
Twitter: @JJComment
Hello Jürgen,
thanks for this blog. Where can I find the table showing the complete list of current authorizations relevant for SAP for Me in a better resolution. It is too small to read anything.
Regards, Roland
Hi Roland,
thanks a lot for your comment and sorry for the little delayed response. For some reason, I didn't get a notification on that one... Hm...
In regards to the list. You mean the table in the blog? Actually, I guess the list itself is big enough but it gets shrinked to fit the blog text. If you right click in the table and take "open in a new tab" it comes up in its orginal size: https://blogs.sap.com/wp-content/uploads/2019/07/Authorization_Table.png
Does that help you?
Beside the list above, a great alternative is https://support.sap.com/content/dam/support/en_us/library/ssp/my-support/help-for-sap-support-applications/concept-users_authorizations_administrators.html#authconcept. At the end of the table, there is a own SAP for Me section that also lists the authorization objects.
Please just reach out to me again, if this all didn't help or if you have other questions. 🙂
All the best,
JJ
Just for completeness. The first comment was refering to a table I uploaded as JPG. In the meantime the table is now a text table.
Hi Gregory,
very good catch and thanks a ton for the hint. I just realized that I didn't update this blog with the latest information.
To see the invoices, you need the authorization "Manage Invoices and Payments". Please notice that invoices are currently for Canada customers only. Further countries are planned to be added on the next months / quarters.
For the CPEA Balance Statment you need authorization "Display Order Information
in SAP for Me". We have extend the reach of this authorization as all this falls under the context of orders and licenses.
I will update the blog in the next days and will add some additional aspects to it. Or maybe I will even write a new blog post about this.
Again, thanks a lot for bringing this up! 🙂
All the best,
JJ
Hello JJ,
I logged in, but can't access info on the cards. To get authorization I can send an email to the admin.
Now when the admin gets my email requesting assigning authorizations, it is not clear what the admin needs to do. There is no link provided in the standard email text.
So how to get access to all the systems, licenses and data without getting the admin mad about all those request emails with no next step defined clearly????? Thanks.
Regards, Victoria
Hi Victoria,
Thank you for your feedback. And I directly understand the issue.
When we developed this automatic mail template to S-User Super Admins, we assumed that Super Admins could respond to this mail very easily. Normally only the authorization name is missing, which we have integrated into the mail.
However, I now realize that the text is not meaningful enough to help a Super Admin who may not work with S-User Administration on a daily basis, or is not yet familiar with the connection between SAP for Me and SAP ONE Support Launchpad.
Interestingly, we have not received this, totally understandable feedback, so far. I will immediately take this to our team and have the text expanded accordingly.
Thanks again for your feedback. This is the only way we can make SAP for Me better. 🙂
All the best,
JJ
Hi JJ,
The link referenced on this page seems to lead nowhere these days. Any chance you have an updated one ?
https://support.sap.com/content/dam/support/en_us/library/ssp/my-support/help-for-sap-support-applications/concept-users_authorizations_administrators.html#authconcept
Thanks,
Bogdan
Hi Bogdan,
You may want to try https://support.sap.com/user-admin-concept, then click 'Authorization concept' in the table of contents.
Best regards,
Peter