## 13.3.4.2.7.21  Country/Region-Specific Features: Norway
Overview of security-relevant information for payroll and personnel administration for the local version for Norway.
## Authorizations
The local version for Norway (PY-NO, PA-PA-NO) uses the standard authorization concept used by SAP S/ 4HANA. Therefore, the recommendations and guidelines for authorizations as described for SAP S/4HANA also apply to the local version for Norway.
Standard Authorization Objects
The local version for Norway uses the security-relevant authorization objects that are available for Personnel Management and Payroll.
For more information, see the following:
- Authorizations (Personnel Management)
- Authorizations (Payroll)
The following table shows the security-relevant authorization objects that are also used in the local version for Norway.
Country/Region-Specific Authorization Objects
| Authorization Object   | Field                                 | Value   | Description                                             |
|------------------------|---------------------------------------|---------|---------------------------------------------------------|
| P_NO_ENTNR             | P20_ENTNR (EDAG - Enter- prise Nr.)   |         | Norway: Authorization object for Enterprise Number      |
| P_NO_ALTIN             | ACTVT (Activity)                      |         | Norway: Authorization to send data to Altinn Portal     |
| P_NO_RTEEX             | REPID (ABAP Program Name)             |         | Norway: Export Runtime En- vironment                    |
| P_NO_RPRTE             | PNO_RPRTEE (HRNO - Re- portee Number) |         | Norway: Authorization object for Reportee               |
| P_NO_TEMSE             | BUKRS (Company Code)                  |         | Authorization object for downloading Norway Temse Files |
## Communication Channel Security
The following table shows the communication paths that the local version for Norway uses, the protocol used for the connection, and the type of data transferred.
| Communication Paths   | Protocol Used                                                                                                                                                             | Type of Data Transferred   | Data Requiring Particular Protection   |
|-----------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------|----------------------------------------|
| A-message             | Internal communication be- tween HRback-end sys- tem and middleware (PI/PO/ CPI): HTTP(S) External communication be- tween middleware (PI/PO/ CPI) and authority: HTTP(S) | Personnel Data             | Personnel Data                         |
| Tax Card              | Internal communication be- tween HRback-end sys- tem and middleware (PI/PO/ CPI): HTTP(S) External communication be- tween middleware (PI/PO/ CPI) and authority: HTTP(S) | Personnel Data             | Personnel Data                         |
| Communication Paths   | Protocol Used                                                                                                                                                             | Type of Data Transferred   | Data Requiring Particular Protection   |
|-----------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------|----------------------------------------|
| Income Form           | Internal communication be- tween HRback-end sys- tem and middleware (PI/PO/ CPI): HTTP(S) External communication be- tween middleware (PI/PO/ CPI) and authority: HTTP(S) | Personnel Data             | Personnel Data                         |
| Sick Note             | Internal communication be- tween HRback-end system and CPI: HTTP(S) External communication be- tween CPI and authority: HTTP(S)                                           | Personnel Data             | Personnel Data                         |
You can use Secure Network Communications (SNC) to protect RFC connections.
##  Recommendation
We strongly recommend that you use secure protocols (SSL, SNC) where possible.
For more information, see the ABAP Platform Security Guide under Transport Layer Security.
## Communication Destinations
You can communicate using the CPI Gateway. The communication channel is encrypted with 128 Bit SSL. Data is transferred using the HTTPS protocol.
The following table presents an overview of the communication destinations that the local version for Norway uses.
Communication Destinations
| Destination           | Provided   | Type   | Description                               |
|-----------------------|------------|--------|-------------------------------------------|
| HR_NO_CPI_EC_REST_API | No         | HTTPS  | CPI - Enterprise Certificate REST API     |
| HR_NO_CPI_EC_USR_MNG  | No         | HTTPS  | CPI - Enterprise Certificate User Manager |
## Data Storage Security
For general information about data storage security in Payroll, see Data Storage Security .
The following contains specific information about the logical file names and path names for Payroll Norway (PY-NO).
## Logical File Names Used in Payroll Norway
The following logical file names were created to facilitate the validation of physical file names:
Logical File Names and Reports
| Logical File Name                   | Reports That Use These Logical File Names   | Logical File Path                 |
|-------------------------------------|---------------------------------------------|-----------------------------------|
| HR_NO_DIR_DOWNLOAD                  | RPLTEMV0 RPCATPV0                           | HR_NO_DIR_DOWNLOAD                |
| HR_NO_DIR_UPLOAD                    | RPLTEMV0 RPSSSTV1                           | HR_NO_DIR_UPLOAD                  |
| HR_NO_LOAN_XML_FILE_NAME_APPSE RVER | RPLLONV0                                    | HR_NO_LOAN_XML_FILE_TO_APPSERV ER |
| HR_NO_LOAN_XML_FILE_NAME_FRONT END  | RPLLONV0                                    | HR_NO_LOAN_XML_FILE_TO_FRONTEN D  |
## Sensitive Data
The Human Resources infotypes often contain sensitive data. This data is protected by central authorization objects. For the local version for Norway, this includes the PERID in the infotype Personal Data (0002).
## More Information
See Payroll (PY) in the SAP S/4HANA Security Guide for Human Resources.
## Related Information
Authorizations [page 247]
Authorizations [page 235]
Payroll (PY) [page 245]