## 13.13.4.2.2.1  Authorizations
## Authorization Concept
If the ABAP Platform functions are not sufficient, you can use the Business Add-In (BAdI) /PM0/ ABP\_TECHCHKTA\_BADI (in enhancement spot /PM0/ABT\_TECHCHKTA\_ES ) to define rules for authorizing characteristics, such as the postal code, replacement business, and checks for amounts and dual control.
## Authorization Roles
Policy Management provides the following role types:
- Template Roles Template roles are templates that can be copied and adjusted in customer implementation projects.
- Demo Roles
Demo roles are examples based on template roles and authorization values of sample content. You should only use them for demo or test purposes.
## Naming Convention for FS-PM Roles
The role name must reflect the component and the process. Consequently the naming convention is SAP\_FSPM\_&lt;role flag&gt;\_&lt;role type&gt;\_&lt;role\_description&gt;, with the following meanings:
- SAP = Standard prefix
- FSPM = Component
- &lt;role flag&gt; = Role flag with possible values C for Composite roles and S for Single roles
- &lt;role type&gt; = Role type with possible values TMPL for template roles and DEMO for demo roles
- &lt;role description&gt; = In composite roles, it is a position description (for example, POLHANDLER for policy handlers). In single roles, it is a description of a task (for example, CREATE\_POLICY ).
In the Auto line of business every set of applications (Bonus-Malus, Insurer Information System, etc.) has its own authorization object with a set of permitted activities. The naming convention is /MVA/ (A)FSPM\_AUTO\_&lt;role\_description&gt; with the following meaning:
- /MVA/ = Standard prefix
- (A)FSPM\_AUTO = (A) Standard Role and FSPM\_AUTO for line of business Motor Vehicle
- &lt;role\_description&gt; = For Motor Vehicle managements (for example BM = Bonus-Malus Management) or for special purpose for example DISPLAY (designed to display Motor Vehicle specific data only)
## Authorization Classes
Policy Management provides the following authorization classes:
- PM0B (FS-PM Basis)
This class contains all cross-line of business authorization objects.
- PM0L (FS-PM Life) This class contains the authorization objects that are needed only in the Life line of business.
- PM0R (FS-PM Workplace)
- This class contains the authorization objects for accessing the PBT (Policy-Based Technology) and PBTrelated transactions.
- PM0O (FS-PM: Authorizations in Orchestration Layer)
This class contains the authorization object for the automatic premium loan financing (APLF).
- /PMG (FS-PM: Group Insurance Authorization Object Class) This class contains the authorization object for the master policy business process. The authorization
object can be configured for the following lines of business:
- BS: Basis
- LL: Life
- LP: P&amp;C (Liability and Personal Accident Insurance)
## Switchable Authorizations Check Framework (SACF)
The Switchable Authorizations Check Framework (SACF) provides additional authorization checks for the following FS-PM scenarios:
- /PM0/INDEX\_01 (Index Component)
- /PM0/CORRESPOND\_01 (Correspondence)
- /PM0/FPP\_01 (Framework for Parallel Processing)
- /PM0/NOTIFICATION\_01 (Notifications)
- /PM0/INFO\_CONT\_01 (Integration FS-CD)
- /PM0/MODELCALC\_01 (Model Calculation)
- /PM0/CLAIMS\_01 (Integration FS-CM)
- /PM0/EXT\_DATES\_01 (Related Dates)
- /PM0/MIGRATION\_01 (Migration)
- /PM0/PREM\_01 (Premium Access)
- /PM0/BP\_01 (Integration BP)
For more information, see the documentation for each scenario in the system.