2198153 - How does a Cloud Administrator add/remove S-user ID authorizations - SAP for Me

• How does a Cloud Administrator add or remove authorizations
• Update authorizations
• Remove user permissions
• Add user permissions
• Establish Cloud Administrator
• Cannot update user authorizations
• Unable to access SAP for Me
• SuccessFactors Cloud Administrator
• User is not able to create a case in SAP for Me
• Create another Cloud Administrator
• How to assign authorizations so a user can access SAP for Me
• What authorizations are needed for a Cloud Administrator
• What authorizations are needed for a Cloud User ID
• Your user does not have permission to access this Case

• S-user IDs for Cloud Solutions 
• SAP for Me > User Management

S-user ID authorization management deals with permissions that are required to fulfill certain support-related tasks using the support applications that are offered in the SAP for Me. Most authorizations contain not only the user's right to perform a specific task, but also the level at which the user can exercise this right.

Cloud administrators have all S-user ID authorizations that are required to fulfill SAP cloud-related tasks in the SAP for Me at the highest possible level. SAP creates the first S-user ID as a Cloud Administrator for new cloud customers. Click HERE for information on a Cloud Administrator.

There are 2 sections below: How to add authorizations and How to delete authorizations

IMPORTANT INFORMATION:

• An administrator cannot edit their own authorizations. If your authorizations need to be updated another administrator on your account will need to to do.
• You can only assign the authorizations that your S-user ID has. For example, you can only assign Display Cloud Data for installation 1234567, if your ID has that same authorization.
• Authorizations can be assigned at different values/levels such as customer number, installation number, or Global (the highest value/level). See KBA 1898762.
• See KBA 1271517 on how to find the list of administrators for your customer number.
• See KBA 1614304 for steps on using the Copy User's Authorization feature.
• S-user IDs must be assigned the Display Cloud Data authorization set at the Cloud Installation Number(s) level to use certain applications in SAP for Me. For SuccessFactors the user ID must have Display Cloud Data set on the SuccessFactors installation number level for case management (KBA 2598170).

The recommended authorizations for users that are not Cloud Administrators are:

Authorizations recommended for a Cloud Administrator are as follows (see the list HERE in case it changes)

Section 1: How to add S-user ID authorizations (see KBA 1511008 for more details)

1. To add or edit authorizations, go to SAP for Me > User Management
2. Find the user with the Users search option or simply locate the user on the Users list
3. Click the user to open the user details screen (the checkbox in front of the name does not work when you are modifying a single user)
4. Click the AUTHORIZATIONS tab and click edit (pencil icon)
   
   
   
   
• Authorizations are grouped by task (e.g. Cases, System Data, etc.). There are several options for assigning authorizations:
• All - Click the All button to assign all authorizations
• By task (e.g. Cases) - Click the checkbox on the main row of that group. For example if you click the box in front of Cases, all case related authorizations are assigned.
• Select individual authorizations - Click each authorization individually
5. For this example, click Cases. Authorizations are assigned automatically at the highest level (Granted for All Customer Numbers and Installations) as you see here:
   
   
   
   
6. If you want to leave the authorizations at the default level and are finished, click the Save icon on the top right of the AUTHORIZATIONS section

Section 2: How to delete authorizations (see KBA 1660828 for more details)

1. Follow steps 1 - 4 above
2. You have several choices for removing authorizations:
• All - Click the All button to remove all authorizations
• By task - Click the checkbox on the group. For example if you click the box in front of Cases, all case related authorizations will be removed.
• Select individual authorizations - Click each authorization individually
3. When you are finished click Save (located at the top right of the AUTHORIZATIONS section)
4. Click the back arrow on the top left of SAP for Me to get back to the Users tab

About the User, Authorization and Administrator Concept

Cloud Admin, SF, Success Factors, permissions , KBA , success factors , cloud-admin , cloud admin , sf admin , XX-SER-FORME , SAP for Me , XX-SER-SAPSMP-USR , User Administration , How To