## 13.2.10.1  Travel Management
## Authorizations
Standard Roles in Travel Management (for Web Dynpro ABAP-Based Applications)
## Role
## Description
| SAP_FI_TV_WEB_TRAVELER_2      | Traveler The role contains the authorization profile needed to execute the applications of the Travel and Expenses Employee Self- Service (ESS) in SAP Enterprise Portal .                                                                                                                                                                      |
|-------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| SAP_FI_TV_WEB_TRAVELER_EXT_TP | Traveler Users with this role can execute the work center for travelers and the corresponding applications in NWBC. NWBCcalls a third-party travel planning solution instead of SAP Travel Planning. The role contains the authorization profile needed to exe- cute the applications of the Travel and Expenses ESS in SAP Enterprise Portal . |
| SAP_FI_TV_WEB_ESS_TRAVELER_2  | ESS Single Role for Travelers Users with this role can execute the work center for travelers and the corresponding applications in NWBC. This role is integrated into the ESS role for Web Dynpro ABAP-based applications ( SAP_EMPLOYEE_ESS_WDA_1 ).                                                                                           |
| SAP_FI_TV_WEB_ASSISTANT_2     | Travel Assistant Users with this role can execute the work center for travel assistants and the corresponding applications in NWBC. The role contains the authorization profile needed to exe- cute the applications of the Travel and Expenses ESS in SAP Enterprise Portal .                                                                  |
| SAP_FI_TV_WEB_ESS_ASSISTANT_2 | Travel Assistant Users with this role can execute the work center for travel assistants and the corresponding applications in NWBC.                                                                                                                                                                                                             |
| SAP_FI_TV_WEB_APPROVER_2      | Approving Manager Users with this role can execute the work center for approv- ing managers and the corresponding applications in NWBC. This role is integrated into the MSSrole for Web Dynpro ABAP-based applications ( SAP_MANAGER_MSS_NWBC ).                                                                                               |
## Role
## Description
| SAP_FI_TV_WEB_POLICY_ADMIN_2   | Travel Policy Administrator Users with this role can execute frequently used Customiz- ing applications for policy management in NWBC.                                                                                                                                                                                                   |
|--------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| SAP_FI_TV_TIC_AGENT            | Travel Interaction Center Agent This role authorizes service agents to run the required trans- actions and Web Dynpro ABAP-based applications in the Travel Management system from within the Travel Interac- tion Center. The Travel Interaction Center is a Shared Services Center in SAP Customer Relationship Management (SAP CRM) . |
## Authorization Profiles
The standard system contains the travel profile FI-TV (infotype 0470 of Human Resources Management (HCM)). Alternatively, you can create the authorization profile by means of organizational assignment using the HR feature TRVCP .
## Authorization Objects
For all general functions, Travel Management uses the authorization object P\_TRAVL .
The transfer of results from expense reports to accounting is protected by the authorization object F\_TRAVL .
The travel plan status is protected by the authorization object F\_TRAVL\_S .
## Network and Communication Security
In Travel Management, you can set up connections to the following global distribution systems (GDS):
- Amadeus The partner is responsible for the Gateway.
- Galileo The partner is responsible for the Gateway.
Alternatively or in addition, you can use SAP Process Integration to set up direct connections to the following travel service providers:
- Flight reservation systems, for example, low-cost carrier providers Depending on the partner, communication with the Web services is HTTPS or HTTP based.
- Hotel reservation systems such as HRS Depending on the partner, communication with the Web services is HTTPS or HTTP based. For the communication channel, you can make various security settings. For more information, see the Configuration Guide .
- Rail portals such as Deutsche Bahn (BIBE) Communication with the Web services is HTTPS based.
Alternatively, instead of using SAP Travel Planning, you can use third-party online booking systems (third-party travel planning) such as:
## · GetThere
Communication with the Web services of GetThere (and of Sabre , if applicable) is HTTPS based. In SAP Enterprise Portal , you can use Single Sign-On (SSO) to automatically log on the SAP Travel Management users to a third-party online booking system.
- e-Travel
- Communication with the Web services of e-Travel is HTTPS based.
In SAP Enterprise Portal , you can use SSO to automatically log on the SAP Travel Management users to a third-party online booking system.
For credit card clearing in Travel Management , you can use SAP Process Integration to set up direct connections to credit card companies. You agree upon the safeguarding of the connection with the respective partner. For more information, see SAP Library under Travel Management (FI-TV) Travel Expenses (FI-TV-COS) Credit Card Clearing .
## Data Storage Security
Travel Management transmits credit card information to the named partners. The data in the SAP system cannot be accessed.
Travel Management supports secure handling of credit card data.
To set up connections to third-party systems, such as reservation systems, you might require company IDs and user-specific technical passwords, which you can define in Customizing or in user-specific infotypes. In Customizing, this data is protected by standard authorization objects for Customizing.
Travel Management imports data from files in the file system. Therefore, it is important to explicitly provide access to the corresponding files in the file system without allowing access to other directories or files (also known as directory traversal). You do this by specifying logical paths and file names in the system that are assigned to the physical paths and file names. The system validates the assignment at runtime and issues an error message if access to a directory is requested that does not match any assignment defined.