## 13.6.1.2  Opportunity and Pipeline Management
You can use Opportunity and Pipeline Management to control your presales process. It provides a framework for tracking the progress of sales projects from the very outset.
## User Management and Authentication
This application uses the user management and authentication mechanisms provided by the ABAP platform, in particular, the security features of the AS ABAP . For more information about the applicable security recommendations and guidelines for user administration and authentication, go to SAP Help Portal at https:/ / help.sap.com/s4hana , choose the relevant release and search for Application Server ABAP Security Guide .
## User Management
| Tool                                                                                                                            | Description                                                                                                                                                  |
|---------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------|
| User and role administration with AS ABAP: User Maintenance ( SU01 ) transaction and the profile generator ( PFCG ) transaction | For more information about user and role administration, see User Administration and Authentication [page 10] and Role Administration in Service [page 608]. |
## User Types
The following users must be created for Opportunity and Pipeline Management:
| User     | Delivered?   | Type        | Default Pass- word   | Description                                                                                                                                             |
|----------|--------------|-------------|----------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------|
| End user | No           | Dialog user | No                   | Mandatory user who can access the opportunity manage- ment application and Customizing for opportunity manage- ment. Created by a system administrator. |
## Authorizations
Opportunity and Pipeline Management uses authorizations provided by the AS ABAP. For more information, go to SAP Help Portal at https:/ /help.sap.com/s4hana , choose the relevant release and search for Application Server ABAP Security Guide .
The AS ABAP authorization concept assigns authorizations to users, and these authorizations are dependent on the user role. For role administration, use the profile generator ( PFCG ) transaction on the AS ABAP.
The following table details the authorization objects for Opportunity and Pippeline Management:
| Authorization Object   | Field                                                                               | Description   |
|------------------------|-------------------------------------------------------------------------------------|---------------|
| CRM_ORD_OP             | PARTN_FCT (partner function) PARTN_FCTT (partner function category) ACTVT(Activity) | Owndocuments  |
| Authorization Object   | Field                                                                                                                                                                  | Description                                            |
|------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------|
| CRM_ORD_LP             | CHECK_LEV PR_TYPE ACTVT (Activity)                                                                                                                                     | Visibility in the organizational model                 |
| CRM_OPP                | ACTVT (Activity)                                                                                                                                                       | Authorization Object Order-Business Object Opportunity |
| CRM_ORD_PR             | PR_Type (Transaction type) ACTVT (Activity)                                                                                                                            | Business Transaction Type                              |
| CRM_ORD_OE             | SALES_ORG (Sales organization) SERVICE_OR (Service organization) DIS_CHANNE (Distribution channel) SALES_OFFI (Sales office) SALES_GROU (Sales group) ACTVT (Activity) | Allowed organizational units                           |
| CRM_TXT_ID             | TEXTOBJECT (texts: application ob- ject) TEXTID (text ID) ACTVT (Activity)                                                                                             | Display and edit texts                                 |
| CRM_FLDCHK             | ACTVT AUGRP (Authorization Group) LEVEL1 (Authorization Level)                                                                                                         | Order Authorization Object-Field Check                 |
## Network and Communication Security
The network topology of this application is based on the ABAP platform. For information about the applicable security guidelines and recommendations, see the Application Server ABAP Security Guide and the section Network and Communication Security [page 19].
## Communication Channel Security
For more information about communication channel security, see Communication Channel Security [page 19]. The available communication paths, protocols used, and type of data transferred are listed in the following table:
| Communication Path                         | Protocol Used                                   | Type of Data Transferred   | Data Requiring Special Pro- tection                 |
|--------------------------------------------|-------------------------------------------------|----------------------------|-----------------------------------------------------|
| Front-end client using SAP GUI for Windows | Dynamic Information and Ac- tion Gateway (DIAG) | All application data       | Passwords, all sensitive data such as customer data |
| Front-end client using a Web browser       | HTTP/HTTPS                                      | All application data       | Passwords, all sensitive data such as customer data |
## Network Security
For more information about network security, see Network and Communication Security [page 19].
## Communication Destinations
The following communication destinations can be reached using the communication paths listed in the section above Communication Channel Security :
| Destination   | Delivered?   | Type                                          | User, Authorizations   | Description   |
|---------------|--------------|-----------------------------------------------|------------------------|---------------|
| AS ABAP       | Yes          | Dynamic Information and Action Gateway (DIAG) | User, password         | N/A           |
## Data Storage Security
Data is stored in database tables of AS ABAP. Depending on the user role, the appropriate rights - read, write, change, and delete - are required. No addition data storage security is required.