## 13.12.2.1  Authorizations and Roles Used by Enterprise Contract Management
Enterprise Contract Management (formerly known as Legal Content Management) uses the authorization concept provided by the AS ABAP. Therefore, the recommendations and guidelines for authorizations as described in the Application Server ABAP Security Guide also apply.
The ABAP Platform authorization concept is based on assigning authorizations to users based on roles. For role maintenance, use the profile generator (transaction PFCG) on the AS ABAP.
##  Note
For more information about how to create roles, see the ABAP Platform Security Guide under User Administration and Authentication.
## Standard Roles
The table below shows the standard roles that are used.
| Role                          | Description                                    |
|-------------------------------|------------------------------------------------|
| SAP_BR_ADMINISTRATOR_LCM      | Administrator - Enterprise Contract Management |
| SAP_BR_EMPLOYEE_LEGAL_CONTENT | Employee - Enterprise Contract Management      |
| SAP_BR_LEGAL_COUNSEL          | Legal Counsel                                  |
## Standard Authorization Objects
The table below shows the security-relevant authorization objects that are used.
| Authorization Object   | Description                                      |
|------------------------|--------------------------------------------------|
| LCM_GEN                | General Activities                               |
| LCM_CTX                | Auth. Obj. for LCMContext                        |
| LCM_CTXADM             | Auth. Obj. for Task in LCMContext Admin. actions |
| Authorization Object   | Description                                                 |
|------------------------|-------------------------------------------------------------|
| LCM_LT                 | Auth. Obj. for LCMLegal Transaction                         |
| LCMDOCSTMP             | Auth. object for Stamps in LCMDocument                      |
| LCMSTMPACT             | Auth. object for Stamp activities in LCMDocument            |
| LCM_LTACT              | Auth. Obj. for Task in LCMLegal Transaction Actions         |
| LCM_DOCHDR             | Auth. Obj. for Document Header                              |
| LCM_DOCLT              | Auth. Obj. for Document header for LT attributes            |
| LCM_LTENCC             | Auth. Obj. for Company Code in Legal Transaction            |
| LCM_LTENPO             | Auth. Obj. for Purchasing Organization in Legal Transaction |
| LCM_LTENSO             | Auth. Obj. for Sales Organization in Legal Transaction      |
## Authorization for DocuSign Integration
The functions for DocuSign integration use the authorization concept provided by ABAP platform. Therefore, the recommendations and guidelines for authorizations as described in the ABAP Platform Security Guide also apply to DocuSign integration. The ABAP platform authorization concept is based on assigning authorizations to users based on roles. For the role maintenance for ABAP technology, use the profile generator (transaction PFCG).
For more information on Authorization for DocuSign integration, please refer to the Set Up Guide of Enterprise Contract Management (1XV) available in the SAP Best Practices Explorer at https:/ /rapid.sap.com/bp/ .
##  Note
We recommend you to also refer to the Security Guide of DocuSign and align with both the information to set-up a consistent security concept in this integration. Refer to the DocuSign security guide at https:/ / www.docusign.com/how-it-works/security and https:/ /www.docusign.com/trust