## 13.3.4.1.7.1  Authorizations
## Use
HCM Processes and Forms uses the authorization concept provided by the AS ABAP. Therefore, the recommendations and guidelines for authorizations as described in the SAP NetWeaver AS Security Guide ABAP also apply to HCM Processes and Forms .
The ABAP Platform authorization concept is based on assigning authorizations to users based on roles. For role maintenance, use the profile generator (transaction PFCG ) on the AS ABAP.
##  Note
For more information about how to create roles, see section Role Administration in the SAP Library for SAP S/4HANA Identity Management .
## Role and Authorization Concept for HCM Processes and Forms
The authorization concept for HCM Processes and Forms is described under the section Authorization Concept of HCM Processes and Forms in the SAP Library for SAP S/4HANA HCM Processes and Forms .
## Standard Roles
The table below shows the standard roles that are used for HCM Processes and Forms authorizations.
Standard Roles for HCM Processes and Forms
| Role                         | Name                                 | Description                                                                                                                                           |
|------------------------------|--------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------|
| SAP_ASR_HRADMIN_SR_HCM_CI_3  | HRAdministrator: NWBCRole            | This single role contains the authoriza- tions for the HRAdministrator role.                                                                          |
| SAP_ASR_EMPLOYEE_SR_HCM_CI_3 | ESS Single Role for HCMPFServices    | This single role contains the authoriza- tions for the Employee role in Employee Self-Service (WDA).                                                  |
| SAP_ASR_EMPLOYEE             | HRAdministrative Services : Employee | This single role contains the authori- zations for the Employee role in the Business Package for Employee Self- Service (up to and including 1.4.1 ). |
| SAP_ASR_MANAGER              | HRAdministrative Services : Manager  | This single role contains the authoriza- tions for the Manager role.                                                                                  |
##  Note
The Employee and Manager roles use HCM Processes and Forms . For security-relevant information regarding these components, see the sections Employee Self Service and Manager Self Service under Self Services in the S/4 HANA Security Guide.
## Standard Authorization Objects
The table below shows the security-relevant authorization objects that are used by HCM Processes and Forms :
| Authorization Object   | Name                                                    | Comment                                                                                              |
|------------------------|---------------------------------------------------------|------------------------------------------------------------------------------------------------------|
| S_RFC                  | Authorization Check for RFC Access                      |                                                                                                      |
| S_SCMG_CAS             | Case Management: Case                                   | These authorization objects manage access to the Process Object of HCM Processes and Forms .         |
| S_SCMG_FLN             | Case Management: Authorization by Field                 | These authorization objects manage access to the Process Object of HCM Processes and Forms .         |
| S_SRMGS_CT             | Records Management: Authorizations for Document Content | These authorization objects manage access to the digital Personnel File in the HRAdministrator Role. |
| S_SRMGS_DC             | Records Management: Authorization for Documents         | These authorization objects manage access to the digital Personnel File in the HRAdministrator Role. |
| S_SRMGS_PR             | Records Management: Authorizations for Attributes       | These authorization objects manage access to the digital Personnel File in the HRAdministrator Role. |
| Authorization Object   | Name                                                  | Comment                                                                                                   |
|------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------------------------------|
| S_SRMSY_CL             | SAP Records Management : General Authorization Object |                                                                                                           |
| S_TCODE                | Transaction Code Check at Transaction Start           |                                                                                                           |
| P_ASRCONT              | Authorization for Process Content                     | This authorization object manages the rights to start and execute processes with HCMProcesses and Forms . |