## 13.8.7.1  Authorizations
Supplier Management uses the authorization concept provided by the AS ABAP. Therefore, the recommendations and guidelines for authorizations as described in the SAP NetWeaver AS Security Guide ABAP also apply.
##  Note
For more information about how to create roles, see the ABAP Platform Security Guide under User Administration and Authentication .
## Front-End Roles
To use the Fiori Launchpad in SAP S/4HANA, you have to apply the SAP S/4HANA role concept based on business catalogs that are assigned to business roles. For the front-end, the following standard business roles are available for Sourcing and Procurement. You can use these roles as templates for your own roles. For more information, see SAP Fiori Overview .
## Back-End Roles
In the back-end, you have to create roles in transaction PFCG and assign business catalogs to the roles. For more information, go to https:/ /help.sap.com/s4hana\_op\_2021, enter Creating Authorization Roles for Catalogs into the search bar, press Enter , and open the search result with that title. In addition, manual actions are required.
##  Note
- Each user has to be assigned to a business partner to have access to the Supplier Management apps. You create a business partner role in the transaction Maintain HR Master Data and assign it to a user in the transaction User Maintenance .
- If you delete a user, the business partner for this user can no longer be used either.
## Authorization Objects Specific to Supplier Management
The table below shows the security-relevant authorization objects that are specific to Supplier Management:
| Authorization Object   | Field    | Value                                                                                                                                                                                                           | Description                                                                                                                                                                                                                                                                                                                                                                                     |
|------------------------|----------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| /SRMSMC/DB             | ACTVT    | Reload                                                                                                                                                                                                          | Enables users to initiate a download of up-to-date data from D&B. Since download- ing data from D&Bis subject to charges, you should assign this role only to employees who are aware of this impli- cation. Enables users to interact with an instance of a busi- ness object of Supplier Management in a specific way. The authorization ob- ject is used in the /SRMSMC/ DNB_REQUESTOR role. |
| /SRMSMC/BO             | /BOFU/BO | /SRMSMC/BO_QNR (Ques- tionnaire) /SRMSMC/BO_SEP (Supplier Evaluation Profile) /SRMSMC/BO_SES (Supplier Evaluation Scorecard) /SRMSMC/BO_SEV (Supplier Evaluation) /SRMSMC/BO_SRS (Supplier Evaluation Response) | As the type of business ob- ject that the user can access, you can specify the values listed.                                                                                                                                                                                                                                                                                                   |
| Authorization Object   | Field   | Value                      | Description                                                                                                                              |
|------------------------|---------|----------------------------|------------------------------------------------------------------------------------------------------------------------------------------|
| /SRMSMC/AM             | ACT_TYP | Customizing, activity type | This authorization object is used to define authorization settings for accessing activi- ties in SAP Supplier and Cat- egory Management. |