Note: This blog was reworked on May 24, 2020 to reflect the current state.
Please have a closer look at my blog “What is SAP for Me?” if you are searching for some background on SAP for Me.
SAP for Me currently uses the S-User framework and its authorization concept, to control access to sensitive data. As SAP for Me introduces capabilities that leverage new data types, we also have introduced new authorizations to the existing S-User framework that can be granted to any S-User by super admins or – in some cases – by cloud administrators.
Please be aware that some authorization can ONLY be granted by either a super admin or cloud admin. We are currently working on a more transparend solution. Until further notice, you will find the required admin types to grant access in the tables below.
Exclusive authorizations for SAP for Me
The authorizations that are specifically created for SAP for Me are:
| Authorization / Description | Related capabilities in SAP for Me |
| Display Order Information in SAP for Me Allows a user to see all orders as well as all licensed materials. To be granted by cloud admin only. |
|
|
Edit Contact-Role Assignment in SAP for Me Allows a user to assign, change or delete customer contacts and roles. To be granted by super admin and cloud admin. |
|
Additional authorizations for SAP for Me
SAP for Me also leverages existing authorizations that have been originally created in the context of the SAP ONE Support Launchpad. These authorizations are:
| Authorization / Description | Related capabilities in SAP for Me |
| Access License Utilization for Cloud Allows a user to see license consumption of cloud products. To be granted by cloud admin only. |
|
|
Display All Incidents or Display Incidents Allows a user to see incidents in SAP for Me To be granted by super admin and cloud admin. |
|
|
Report an Incident or Send Incidents to SAP Allows a user to create an incident in SAP for Me To be granted by super admin and cloud admin. |
|
Authorizations not in use (for now)
There are also some additional authorizations in place which are NOT used by SAP for Me for now.
| Authorization / Description | Related capabilities in SAP for Me |
|
Display Company-Wide Learning Status in SAP for Me Allows a user to see company-wide learning content. To be granted by super admin and cloud admin. |
Company-wide learning content to be expected in 2020 |
|
Edit Main, Technical or Financial Contact Person in SAP for Me Allows a user to assign, change or delete order contacts and roles To be granted by super admin and cloud admin. |
Editable order contacts to be expected in 2020 |
| Access License Utilization for OnPremAllows a user to see license consumption of on-premise products. To be granted by super admin, only. |
On-Premise consumption data to be expected in 2020 |
| Display Software Agreement Information in SAP for Me |
Authorization is subject to be deleted in the next cleanup
|
Authorizations vs. customer account
At the current point in time SAP for Me shows data based on the customer account that is linked to the given S-User. In the near future, we also plan to support account hierarchies known as CCoE Level in the S-User framework. As soon as we support account hierarchies, I will update this blog accordingly.
By the way. If you are interested, there is also a list of all authorizations that are available for an S-User in the context of SAP ONE Support Launchpad and SAP for Me available for your reference. Here you will also find more information in regards to the S-User framework in general.
Finally, if you are looking for S-user administrators on your side, don’t miss the “My Important Contacts” list in the SAP ONE Support Launchpad.
All the best,
JJ
Jürgen Jakowski
Chief Product Owner of SAP for Me
Twitter: @JJComment
Hello Jürgen,
thanks for this blog. Where can I find the table showing the complete list of current authorizations relevant for SAP for Me in a better resolution. It is too small to read anything.
Regards, Roland
Hi Roland,
thanks a lot for your comment and sorry for the little delayed response. For some reason, I didn’t get a notification on that one… Hm…
In regards to the list. You mean the table in the blog? Actually, I guess the list itself is big enough but it gets shrinked to fit the blog text. If you right click in the table and take “open in a new tab” it comes up in its orginal size: https://blogs.sap.com/wp-content/uploads/2019/07/Authorization_Table.png
Does that help you?
Beside the list above, a great alternative is https://support.sap.com/content/dam/support/en_us/library/ssp/my-support/help-for-sap-support-applications/concept-users_authorizations_administrators.html#authconcept. At the end of the table, there is a own SAP for Me section that also lists the authorization objects.
Please just reach out to me again, if this all didn’t help or if you have other questions. 🙂
All the best,
JJ
Just for completeness. The first comment was refering to a table I uploaded as JPG. In the meantime the table is now a text table.