## 13.3.6.1.3   Authorizations
## Use
The SAP Personnel Time Management component uses the authorization concept provided by AS ABAP. Therefore, the recommendations and guidelines for authorizations as described in the AS ABAP Security Guide also apply to SAP Personnel Time Management.
The ABAP Platform authorization concept is based on assigning authorizations to users based on roles. For role maintenance, use the profile generator (transaction PFCG) on the ABAP.
For more information about how to create roles, see Role Administration under Role and Authorization Concept for SAP Personnel Time Management .
## Standard Roles
The table below shows the standard roles that are used by the SAP Personnel Time Management.
| Role                           | Description                                                                                                 |
|--------------------------------|-------------------------------------------------------------------------------------------------------------|
| SAP_HR_PT_SHIFT-PLANNER        | Shift Planner                                                                                               |
| SAP_HR_PT_TIME-ADMINISTRATOR   | Time Administrator                                                                                          |
| SAP_HR_PT_TIME-LABOR-ANALYST   | Time and Labor Analyst                                                                                      |
| SAP_HR_PT_TIME-MGMT-SPECIALIST | Time Management Specialist                                                                                  |
| SAP_HR_PT_TIME-SUPERVISOR      | Time Supervisor                                                                                             |
| SAP_ESSUSER_ERP05              | Employee Self-Service                                                                                       |
| SAP_HR_PT_US_PS_TIME-ADM       | Time Recording Administrator This role is used only in the Public Sector in the country version for the USA |
## Standard Authorization Objects
The table below shows the security-relevant authorization objects that are used by SAP Personnel Time Management.
| Authorization Object   | Field   | Value   | Description                                                                                                                                                       |
|------------------------|---------|---------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| P_PERNR                | AUTHC   | E, R    | Used to assign different au- thorizations to users for ac- cessing their own personnel number. P_PERNR is relevant for Self-Service Scenarios (Role SAP_EMPLOYEE) |
| Authorization Object   | Field   | Value                                                                                          | Description                                             |
|------------------------|---------|------------------------------------------------------------------------------------------------|---------------------------------------------------------|
| P_PERNR                | INFTY   | 0000, 0001, 0002, 0007, 0416, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2010, 2011, 2012, 2013 | Infotypes required                                      |
| P_ORGIN                | AUTHC   | E, R                                                                                           | Used during the authoriza- tion check for HRinfotypes.  |
| P_ORGIN                | INFTY   | 0000, 0001, 0002, 0007, 0416, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2010, 2011, 2012, 2013 | Infotypes required                                      |
| P_PCLX                 | AUTHC   | W, R                                                                                           | Relevant for both Time Evalu- ation and Time Recording. |
| P_PCLX                 | RELID   | B1, B2, L1, G1, PC                                                                             | Clusters required                                       |