Book excerpt: This book gives you a practical and comprehensive introduction to the design and management of authorizations in SAP. You'll learn how to develop a meaningful authorization concept that meets statutory requirements and is tailored to your business processes. And you'll learn how those processes are implemented as authorizations in your SAP system. In addition you'll gain insight into which tools and functions of the change management process in SAP play a role in designing and implementing an authorizations concept, and learn about SAP NetWeaver IdM, CUA, SAP BusinessObjects Access Control, and the UME. Finally, you'll discover how to implement an authorizations concept in various other SAP applications and components (SAP ERP, HCM, CRM, SRM, and BW). 1. Organizational Permissions Learn how to develop a systematic differentiation of roles and permissions in SAP ERP. You'll also learn how to assign roles for the organizational management of SAP ERP HCM. 2. Legal Frameworks Discover the legal and regulatory scenarios (i.e., accounting law and data governance) that are relevant to your business, and how they fit into the authorization concept. 3. SAP Tools for Change Management Master the essential tools for authorizations management, including the Role Manager, CUA, SAP BusinessObjects Access Control, SAP NetWeaver IdM, UME, and more. 4. Technical Basics and Customizing Learn which features are relevant to user maintenance and the basic settings necessary for a meaningful functional separation. 5. Authorizations in SAP Systems Gain an in-depth understanding of the core processes of SAP ERP, as well as the specific requirements of SAP ERP HCM, SAP CRM, SAP SRM and SAP NetWeaver. Highlights: Organization and permissions Legal framework Technical principles of the change management process System preferences and customizing Role assignment via Organizational Management Role Manager Central User Administration (CUA) SAP NetWeaver Identity Management (IdM) SAP BusinessObjects Access Control User Management Engine (UME) Authorizations in HCM, CRM, SRM, and BW Permissions in Financial Accounting Logistics and administration