## 13.3.6.1.2  User Management
## Use
User management in SAP Personnel Time Management uses the mechanisms provided with the Application Server ABAP, for example, tools, user types, and password policies. For an overview of how these mechanisms apply for SAP Personnel Time Management, see the sections below. In addition, we provide a list of the standard users required for operating the SAP Personnel Time Management.
<!-- image -->
<!-- image -->
<!-- image -->
## User Administration Tools
The table below shows the tools to use for user management and user administration with SAP Personnel Time Management.
## User Management Tools
| Tool                                                             | Detailed Description                                                | Prerequisites   |
|------------------------------------------------------------------|---------------------------------------------------------------------|-----------------|
| User and role maintenance with AS ABAP (Transactions SU01, PFCG) | For more information, see User and Role Administration of AS ABAP . |                 |
## User Types
It is necessary to specify different security policies for different types of users. For example, your policy may specify that individual users who perform tasks interactively must change their passwords on a regular basis, but not users who run background processing jobs.
The specific user types that are required for the SAP Personnel Time Management include:
## Technical users
- To upload time events from the external time recording system you use the RPTCC106 report ( HR-PDC: Download Upload Request for Time Events ). Y ou normally schedule the report as a background processing job. For this you require a technical user. The authorizations of the technical user should be based on the authorizations for the PT80 transaction ( Subsystem Connection ). Time events are uploaded from the subsystem by an IDOC, which stores the time events in the CC1TEV interface table. For the upload, you need a technical user with authorizations for communication with an SAP system using Application Link Enabling (ALE) and the relevant table authorizations. The technical user does not require authorizations specific to the SAP HR solution. You need a technical user with authorizations for the PT45 transaction ( HR-PDC: Post Person Time Events ) for the background processing job that transfers the time events from the interface table to the relevant Time Management tables.
- You need two types of technical users for BAPIs that store data in one of the following interface tables:
- PTEXDIR
- PTEX2000
- PTEX2003
- PTEX2010
To fill the interface tables, you need a user with authorizations for ALE communication with an SAP system and the relevant table authorizations. For the subsequent background processing job to transfer data from the interface tables to the infotype database tables, you need a technical user with the same authorizations that are required for the CAT6 transaction ( Transfer Time Data to Time Management ).
- For technical users that have read access to the infotypes for the BAPIs, you can use the same authorizations as contained in the SAP\_HR\_PT\_TIMEADMINISTRATOR role.