## 13.13.3.1.1.1  Authorizations
SAP Oil &amp; Gas uses the authorization concept provided by the AS ABAP. Therefore, the recommendations and guidelines for authorizations as described in the SAP NetWeaver AS Security Guide ABAP also applies.
The ABAP Platform authorization concept is based on assigning authorizations to users based on roles. For role maintenance, use the profile generator (transaction PFCG) on the AS ABAP.
##  Note
For more information about how to create roles, see the ABAP Platform Security Guide under User Administration and Authentication.
## Standard Roles - Backend
SAP delivers standard roles covering the most frequent business transactions. You can use these roles as a template for your own roles.
In Oil &amp; Gas, PFCG delta roles are used to access content in the application. To make the end-user role complete these roles must be used along with other roles delivered by SAP. Example roles are included in the table below. These roles are designed to support your IS-OIL business processes. The following roles are delivered:
Software Component IS-PRA
| Role                    | Description                                                      |
|-------------------------|------------------------------------------------------------------|
| SAP_UPS_ALLOC_RES_APP   | SAP Upstream Allocation Results                                  |
| SAP_UPS_ALLOC_STAT_APP  | SAP Upstream Network Allocation Status                           |
| SAP_UPS_BULKUPLOAD_APP  | SAP UPS Upload Production Data                                   |
| SAP_UPS_DEFER_EVT_APP   | SAP Upstream View Deferment Events Application Role              |
| SAP_UPS_DEFER_RES_APP   | SAP Upstream Analyze Deferment Application Role                  |
| SAP_UPS_DEFER_WOEVT_APP | SAP Upstream Deferment Events for Work Orders Applica- tion Role |
| SAP_UPS_DTIMPORT        | SAP Upstream Operations Management Data Import Role              |
| SAP_SR_UOM_S4           | NWBCUpstream Operations Management Role                          |
| SAP_UPS_FC_ACCESS_APP   | SAP UOMManageAccess                                              |
| SAP_UPS_FC_CALFCST_APP  | SAP UOMCalculate Forecast                                        |
| SAP_UPS_FC_GTHDATA_APP  | SAP UOMGather Data                                               |
| SAP_UPS_FC_MNGPROJ_APP  | SAP UOMManageProjects                                            |
| SAP_UPS_FC_RESULTS_APP  | SAP UOMView Forecasting Results                                  |
| SAP_UPS_FDC_APP         | SAP Upstream Field Data                                          |
| SAP_UPS_FIXERRORS_APP   | SAP Upstream Fix Errors                                          |
| SAP_UPS_MNGHIER_APP     | SAP UPS Manage Hierarchy                                         |
| SAP_UPS_FC_APFCST_APP   | SAP UOMApprove and Publish Forecast                              |
| SAP_UPS_NTWK_MODEL_APP  | SAP Upstream Network Modeling                                    |
## Critical Combinations
## Roles Creation in PFCG
1. Copy the standard role ( SAP\_UPS\_DEFER\_RES\_APP ) to a new role and change the authorization as required by the user.
For example, role created is Z\_RES\_CREATE , and the authorizations provided to this role are to view particular production network (HK\_PN) and to create and display the event for this particular production network. The user, to which this role is assigned, will only be able to view or create the event for this particular production network.
2. Assign the role to the user.
3. Log in with the same user in the application.
4. Create event for the same.
## Standard Fiori Business Roles
The following table shows the standard Fiori business roles used in Upstream Operations Management:
Software Component UIS4HOP1 (UI for S/4HANA On Premise)
| Role                           | Description                         |
|--------------------------------|-------------------------------------|
| SAP_BR_BUSINESS_ANALYST_IOG    | Business Analyst (IOG)              |
| SAP_BR_DEFERMENT_ANALYST_IOG   | Deferment Analyst (IOG)             |
| SAP_BR_FC_ANALYST_PROD_IOG     | Forecast Analyst - Production (IOG) |
| SAP_BR_FIELD_OPERATOR_IOG      | Field Operator (IOG)                |
| SAP_BR_FORECAST_MANAGER_IOG    | Forecast Manager (IOG)              |
| SAP_BR_FORECAST_SPECIALIST_IOG | Forecast Specialist (IOG)           |
| SAP_BR_HYDROCARBON_ANALYST_IOG | Hydrocarbon Analyst (IOG)           |
| SAP_BR_PROD_DATA_SPEC_IOG      | Production Data Specialist (IOG)    |
| SAP_BR_MASTER_DATA_IOG         | Master Data Specialist (IOG)        |