SAP Business ByDesign is all about getting organized, and a great way to get started is by making sure your users have the access rights to the exact parts of the system that they need.

In this blog, we’ll show you 3 simple ways you can manage the access rights of your users in SAP ByDesign.

1. Work Centers and Work Center Views

The work center is the collection of tabs at the top of the screen that covers the general areas of functionality. The work center includes options such as “Sales Orders”, “General Ledger”, and “Product Data.”

By managing access at this level, user rights to entire sections of the system can be managed with just a few clicks.

Within each of these work centers are work center views. Work center views contain more specific functionality and typically display common tasks, listed to the right, for convenience.

High-level access to the work center and work center views can be managed consistently and efficiently for groups of users that share a business role. These access rights can also be managed together in the same place.

2. Individual Access Rights

For more detailed access rights maintenance, you can allow (or restrict) specific read and write access for users within a certain work center view.

For example, in the “Service Order Processing” work center view, a restriction could be set so that the user could only see service orders relevant to their particular organizational unit.

3. User Interface Switches

For the most granular access control, you can use User Interface (UI) Switches. This functionality allows you to adjust the write access and visibility of specific fields for particular users.

A great example of a situation where UI switches would be handy is when you need to control access to fields that block a document’s release. For instance, let’s say that you wanted to control who could remove execution blocks on service orders.

To do this, you would first create a UI switch that allowed someone to edit the “Execution Block” field on orders. Then you would assign the switch to a business role, which would give write access for the field to users with the role assigned to them. Additionally, after the switch was created, any user without the switch assigned to them would now only be able to see, but not edit, the “Execution Block” field. This last bit saves you the extra step of defining what happens for users without the switch.

Try Access Rights Management for Yourself!

Now that you understand the different types of access rights management, try out some of these access rights adjustments for yourself! If you’d like to find out more, or have any questions, please contact us using the form below. We’d be happy to help!