## 13.6.1.1  Activity Management and Visit Planning
You can use Activity Management and Visit Planning to manage all activities undertaken by the employees of your company.
Activities such as interaction logs and appointments keep a record of any interaction that has taken place between your company and its customers. Tasks provide a way for your employees to manage their own workload and to record reminders.
## User Management and Authentication
This application uses the user management and authentication mechanisms provided by the ABAP platform, in particular, the security features of the AS ABAP . For more information about the applicable security recommendations and guidelines for user administration and authentication, go to SAP Help Portal at https:/ / help.sap.com/s4hana , choose the relevant release and search for Application Server ABAP Security Guide .
## User Management
| Tool                                                                                                                            | Description                                                                                                           |
|---------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------|
| User and role administration with AS ABAP: User Maintenance ( SU01 ) transaction and the profile generator ( PFCG ) transaction | For more information about user and role administration, see and [page 10] Role Administration in Service [page 608]. |
## User Types
You must create the following user:
| User     | Delivered?   | Type        | Default Password   | Description                                                                                                                                    |
|----------|--------------|-------------|--------------------|------------------------------------------------------------------------------------------------------------------------------------------------|
| End user | No           | Dialog user | No                 | Mandatory user who can access Activity Management applica- tions and Customizing for Activity Manage- ment. Created by a system administrator. |
## Authorizations
Activity Management uses authorizations provided by the AS ABAP. For more information, go to SAP Help Portal at https:/ /help.sap.com/s4hana , choose the relevant release and search for Application Server ABAP Security Guide .
The AS ABAP authorization concept assigns authorizations to users, and these authorizations are dependent on the user role. For role administration, use the profile generator ( PFCG ) transaction on the AS ABAP.
The following table details the authorization objects for Activity Management:
| Authorization Object   | Field                                                                                                                                                                  | Description                                         |
|------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------|
| CRM_ORD_OP             | PARTN_FCT (partner function) PARTN_FCTT (partner function category) ACTVT(Activity)                                                                                    | Owndocuments                                        |
| CRM_ORD_LP             | CHECK_LEV PR_TYPE ACTVT (Activity)                                                                                                                                     | Visibility in the organizational model              |
| CRM_ACT                | ACTVT (Activity)                                                                                                                                                       | Authorization Object Order-Business Object Activity |
| CRM_ORD_PR             | PR_Type (transaction type) ACTVT (Activity)                                                                                                                            | Business Transaction Type                           |
| CRM_ORD_OE             | SALES_ORG (sales organization) SERVICE_OR (service organization) DIS_CHANNE (distribution channel) SALES_OFFI (sales office) SALES_GROU (sales group) ACTVT (activity) | Allowed organizational units                        |
| CRM_TXT_ID             | TEXTOBJECT (texts: application ob- ject) TEXTID (text ID) ACTVT (Activity)                                                                                             | Display and edit texts                              |
| CRM_FLDCHK             | ACTVT AUGRP (Authorization Group) LEVEL1 (Authorization Level)                                                                                                         | Order Authorization Object-Field Check              |
## Network and Communication Security
The network topology of this application is based on the ABAP platform. For information about the applicable security guidelines and recommendations, see the Application Server ABAP Security Guide and the section Network and Communication Security [page 19].
## Communication Channel Security
For more information about communication channel security, see Communication Channel Security [page 19]. The available communication paths, protocols used, and type of data transferred are listed in the following table:
| Communication Path                         | Protocol Used                                   | Type of Data Transferred   | Data Requiring Special Pro- tection                 |
|--------------------------------------------|-------------------------------------------------|----------------------------|-----------------------------------------------------|
| Front-end client using SAP GUI for Windows | Dynamic Information and Ac- tion Gateway (DIAG) | All application data       | Passwords, all sensitive data such as customer data |
| Front-end client using a Web browser       | HTTP/HTTPS                                      | All application data       | Passwords, all sensitive data such as customer data |
## Communication Destinations
The following communication destinations can be reached using the communication paths listed in the above section Communication Channel Security :
| Destination   | Delivered?   | Type                                          | User, Authorizations   | Description   |
|---------------|--------------|-----------------------------------------------|------------------------|---------------|
| AS ABAP       | Yes          | Dynamic Information and Action Gateway (DIAG) | User, password         | N/A           |
## Data Storage Security
Data is stored in database tables of AS ABAP. Depending on the user role, the appropriate rights - read, write, change, and delete - are required. No additional data storage security is required.