## 13.11.1.1.1  Roles for Process Observer
Process Observer uses the authorization concept provided by the SAP NetWeaver for Application Server ABAP. Therefore, the recommendations and guidelines for authorizations as described in the SAP NetWeaver AS Security Guide ABAP also apply.
The ABAP Platform authorization concept is based on assigning authorizations to users based on roles. For role maintenance, use the profile generator (transaction PFCG) on the AS ABAP.
##  Note
For more information about how to create roles, see the ABAP Platform Security Guide under User Administration and Authentication .
## Standard Roles
SAP delivers the following standard roles for Process Observer. You can use these roles as a template for your own roles.
## Role
## Description
| Administration ( SAP_POC_ADMINISTRATION )                          | This single role contains all the functions that you need to set up process monitoring: • Maintain Customizing • Implement tracing in the application • Schedule jobs • Delete log entries and execute mass deletion of log en- tries • Update the master registry • Carry out configuration activities   |
|--------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Define Process ( SAP_POC_MODEL )                                   | This single role contains all the functions that you need to create a process definition: • Define a process • Define BRFplus rules • Create a process simulation                                                                                                                                         |
| View Process ( SAP_POC_MONITOR )                                   | This single role contains all the functions that you need to view process details in the Process Monitor SAP GUI screen: • Display process details                                                                                                                                                        |
| Analytics ( SAP_POC_ANALYTICS )                                    | This single role contains all the functions that you need to access the process-monitoring-relevant analytics content in the SAP Business Information Warehouse: • Display analytics information                                                                                                          |
| Launchpad for Order to Cash Dashboard ( SAP_BW_POC_O2C_ANALYTICS ) | This single role contains all the functions required to launch the Dashboard for O2C Scenario.                                                                                                                                                                                                            |
| Side Panel for Process Observer Data ( SAP_POC_SIDEPANEL )         | This single role enables the user to see Process Observer data for standard transactions such as display sales order, display enquiry etc in a sidepanel using SAP Business Client.                                                                                                                       |
| Administration ( SAP_POC_ADMIN )                                   | This composite role contains all the functions that you need to set up process monitoring.                                                                                                                                                                                                                |
| Business Process Expert ( SAP_POC_BPX )                            | This composite role contains all the functions that you need, as a business process expert, to set up process definitions: • Define a process • Define BRFplus rules • Create a process simulation • Display process details                                                                              |
## Standard Authorization Object
The basis for all roles used for data security for Process Observer is the authorization object POC\_AUTH .