## 13.3.6.2.2  Authorizations
## Use
The Cross-Application Time Sheet (CA-TS) uses the authorization concept provided by the AS ABAP and AS Java. Therefore, the recommendations and guidelines for authorizations as described in the Application Server
ABAP Security Guide and SAP NetWeaver AS Security Guide Java also apply to the Cross-Application Time Sheet (CA-TS).
The ABAP Platform authorization concept is based on assigning authorizations to users based on roles. For role maintenance, use the profile generator (transaction PFCG) on the AS ABAP and the User Management Engine's user administration console on the AS Java.
##  Note
For more information about how to create roles, see section Role Administration under the SAP Library for SAP S/4 HANA Identity Management .
The following section shows the typical scenarios, the relevant roles and the authorization objects that CrossApplication Time Sheet (CA-TS) uses. These are:
Enter Working Times in Time Sheet
Approve Working Times
Transfer Working Times to Target Components
## Role and Authorization Concept for Cross-Application Time Sheet (CA-TS)
Enter Working Times
## Standard Roles
The table below shows the standard roles that are used by the Cross-Application Time Sheet (CA-TS).
| Role                                                                                                          | Description                                                                                                                                                                                                                                                              |
|---------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| SAP_HR_PT_TIME-ADMINISTRATOR                                                                                  | Time Administrator: The Time Administrator role is per- formed by employees in the individual departments of a company, such as secretaries and foremen. Their duties include entering employees' documents in the system and reacting to messages from time evaluation. |
| SAP_EMPLOYEE_WDA_1 (This includes single role SAP_EM- PLOYEE_XX_ESS_WDA_1 containing authorizations for CATS) | Employee Self-Service (WD ABAP): You need this role if you want to enable all your company's employees to record their working times.                                                                                                                                    |
## Standard Authorization Objects
The table below shows the security-relevant authorization objects that are used by the Cross-Application Time Sheet (CA-TS).
| Authorization Object   | Field   | Value                                                      | Description                                                                                                                                                           |
|------------------------|---------|------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| P_PERNR                | AUTHC   | E, R                                                       | Used to assign users dif- ferent authorizations for ac- cessing their own personnel number. P_PERNR is relevant for Self Service Scenarios (Role SAP_EMPLOYEE)        |
| P_PERNR                | INFTY   | 0000, 0001, 0002, 0007, 0315, 0316, 2001, 2002, 2003, 2010 | Needed infotypes                                                                                                                                                      |
| P_ORGIN                | AUTHC   | E, R                                                       | Used during the authori- zation check for HRinfo- types. P_ORGIN is relevant for Administrator Scenarios (Role AP_HR_PT_TIME-AD- MINISTRATOR, SAP_ISR_RE- TAIL_STORE) |
| P_ORGIN                | INFTY   | 0000, 0001, 0002, 0007, 0315, 0316, 2001, 2002, 2003, 2010 | Needed infotypes                                                                                                                                                      |
| P_PCLX                 | AUTHC   | R                                                          | Relevant for both Self Service and Adminstrator Scenarios, used when attendance/ab- sence types are recorded and to display target hours.                             |
| P_PCLX                 | RELID   | B2, PC                                                     | Needed clusters                                                                                                                                                       |
## Approve Working Times
## Standard Roles
The table below shows the standard roles that are used by the Cross-Application Time Sheet (CA-TS).
## Role
## Description
| SAP_HR_PT_TIME-SUPERVISOR   | The Time Supervisor role is performed by executive em- ployees in the individual departments of a company, such as those with personnel responsibility, department heads, project managers, or foremen. The Time Supervisor plans and approves leave and alter- ations to working times. He or she orders overtime as required, and regularly monitors the amount of overtime worked in the department. He or she checks and approves employees' activity reports, and monitors absence times.   |
|-----------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
## Standard Authorization Objects
The table below shows the security-relevant authorization objects that are used by the Cross-Application Time Sheet (CA-TS).
| Authorization Object   | Field   | Value            | Description                                                                         |
|------------------------|---------|------------------|-------------------------------------------------------------------------------------|
| P_ORGIN                | AUTHC   | D, R             | Authorization object that is used during the authoriza- tion check for HRinfotypes. |
| P_ORGIN                | INFTY   | 0328, 2001, 2002 | Needed infotypes                                                                    |
## Transfer Working Times to Target Components
## Standard Roles
The table below shows the standard roles that are used by the Cross-Application Time Sheet (CA-TS).
| Role                           | Description                                                                                                                                                                                                                                                                                                                                                     |
|--------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| SAP_HR_PT_TIME-MGMT-SPECIALIST | The time management specialist is responsible for the smooth operation of the time management system. He or she is familiar with the technical side of the SAP System. The time management activities for this role include controlling the transfer of data to other SAP applications, such as the transfer of data from the SAP Cross-Application Time Sheet. |
## Standard Authorization Objects
The table below shows the security-relevant authorization objects that are used by the Cross-Application Time Sheet (CA-TS).
| Authorization Object   | Field       | Value       | Description   |
|------------------------|-------------|-------------|---------------|
| P_ORGIN                | No proposal | No proposal |               |
| P_PERNR                | No proposal | No proposal |               |
| PCLX                   | No proposal | No proposal |               |