Authorization default values are automatically created when you create a service binding. You can add authorization objects and change the default authorization values.
The authorization default values are the authorizations that are assigned to business users by default if they have a business role based on the service. Note, however, that the authorization default values can be overwritten by values set in the IAM app. Therefore, if you want to avoid double maintenance, try and define the authorization default values in such a way that they can be used by all derived IAM apps.
For more information about authorization default values, see the user guide for ABAP development tools.
-
Open the service binding and choose the Maintain Authorization Default Values link.
-
Choose Synchronize to add the latest authorization objects from the own context.
The Synchronize function only adds authorization objects that are not yet part of the list of authorization objects; it does not remove objects.
-
To check or change the authorization default values that are assigned automatically, select the authorization objects in the list.
You can now specify what activities you want to authorize.
-
Choose the authorization object from the list and choose Default With Field Values from the dropdown list.
In our example, we authorize for the standard activities Create, Display, Change, and Delete as well as the business object-specific activity Calculate.
Now, the standard authorizations for the service are defined and will be applied to an IAM app based on the service. You still can change them later in the IAM app itself.
Related Information