## 13.3.4.2.7.31  Country/Region-Specific Features: The Netherlands
Overview of security-relevant information for payroll and personnel administration for the local version for the Netherlands.
## Authorizations
The local version for the Netherlands ( PY-NL , PA-PA-NL ) uses the standard authorization concept used by SAP S/4HANA. Therefore, the recommendations and guidelines for authorizations as described for SAP S/ 4HANA also apply to the local version for the Netherlands.
## Standard Authorization Objects
The local version for the Netherlands uses the security-relevant authorization objects that are available for Personnel Management and Payroll.
For more information, see the following:
- Authorizations [page 235] (Personnel Management)
- Authorizations [page 247] (Payroll)
- Authorizations [page 256] (B2A: Communication with Authorities)
The following table shows the security-relevant authorization objects that are also used in the local version for the Netherlands.
Country/Region-Specific Authorization Objects
| Authorization Object   | Field                                                                                                               | Value                                                                                                            | Description                                                  |
|------------------------|---------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------|
| P_NL_AEDM              | JUPER (Legal person) ACTVT (Activity)                                                                               | The Activity ( ACTVT ) field has the following values: • 01 = Add or сreate • 03 = Display status                | HR: Authorization object for Day-one-announcement            |
| P_NL_EIR               | PERSA (Personnel Area) PERSG (Employee Group) PERSK (Employee Subgroup) VDSK1 (Organizational Key) ACTVT (Activity) | The Activity ( ACTVT ) field has the following values: • 41 = Delete inDB • A3 = Change status • H1 = Deactivate | HR: Authorization object Elec. Illness &Recovery Re- porting |
| Authorization Object   | Field                                 | Value                                                                                                                                                                                                                                                       | Description                                                                                                      |
|------------------------|---------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------|
| P_NL_LA06              | JUPER (Legal person) ACTVT (Activity) | For the Wage Return and CAK Return reports, the Ac- tivity ( ACTVT ) field has the following values: • 01 = Change or create • 03 = Display                                                                                                                 | HR: Authorization object for Wage Return, Work Cost Reg- ulation (WCR), Pension Re- turn, and CAK Return reports |
|                        |                                       | For the Work Cost Regulation reports, the Activity ( ACTVT ) field has the following values: • 16 = Extract • 33 = Read • 34 = Change                                                                                                                       |                                                                                                                  |
|                        |                                       | For the Pension Return re- ports, the Activity ( ACTVT ) field has the following values: • 29 = Display data (APG) • 30 = Create data (APG) • A6 = Display data (Ach- mea) • A7 = Create data (Ach- mea) • B1 = Display data (UPA) • B2 = Create data (UPA) |                                                                                                                  |
## Communication Channel Security
The following table presents the communication paths used by the local version for the Netherlands ( PY-NL , PA-PA-NL ), the protocol used by the connection, the type of data transferred, and the data requiring particular protection.
| Communication Paths and Their Protocols   | Communication Paths and Their Protocols   | Type of Data Transferred                                            | Data Requiring Particular Protection   |
|-------------------------------------------|-------------------------------------------|---------------------------------------------------------------------|----------------------------------------|
| Communication Paths                       | Protocol Used                             |                                                                     |                                        |
| Wage Return                               | HTTPS                                     | Periodical declarations of personnel and salary-related information | Personal Data                          |
| Communication Paths          | Protocol Used   | Type of Data Transferred                                                | Data Requiring Particular Protection   |
|------------------------------|-----------------|-------------------------------------------------------------------------|----------------------------------------|
| Pension Return               | HTTPS           | Periodical declarations of personnel and pension-re- lated information  | Personal Data                          |
| Electronic Illness Reporting | HTTPS           | Event-based declarations of personnel and illness/ab- sence information | Personal Data                          |
You can use Secure Network Communications (SNC) to protect RFC connections.
##  Note
We strongly recommend that you use secure protocols (SSL, SNC) where possible.
For more information, see Transport Layer Security in the ABAP Platform Security Guide.
For more information about B2A security, see B2A: Communication with Authorities [page 255].
## Communication Destinations
The following table presents an overview of the communication destinations that the local version for the Netherlands uses.
Communication Destinations
| Destination                  | Provided                            | Type           | Description                                                                           |
|------------------------------|-------------------------------------|----------------|---------------------------------------------------------------------------------------|
| Wage Return                  | For local version the Nether- lands | Consumer Proxy | Service consumer: • CO_HRNL_SBRAANLEVE R_SERVICE_V1 • CO_HRNL_SBRSTATUSI NFORMATIE_SE |
| Pension Return               | For local version the Nether- lands | Consumer Proxy | Service consumer: • CO_HRNL_PR_WS_UPA_ MSGUPAWEB_SE                                   |
| Electronic Illness Reporting | For local version the Nether- lands | Consumer Proxy | Service consumer: • CO_HRNL_SBRAANLEVE R_SERVICE_V1 • CO_HRNL_SBRSTATUSI NFORMATIE_SE |
## Data Storage Security
For general information about data storage security in Payroll, see Data Storage Security [page 251].
The following contains specific information about some of the logical file names and path names for Payroll Netherlands ( PY-NL ).
## Logical File Names Used in Payroll Netherlands
The following logical file names were created to facilitate the validation of physical file names:
Logical File Names, Logical Path Names, and Reports
| Logical File Name   | Logical Path Names   | Reports That Use These Logical File Names   |
|---------------------|----------------------|---------------------------------------------|
| HR_NL_EDM_DONE      | HR_NL_EDM_DONE       | • RPCEDKN0 • RPCEDZN0                       |
| HR_NL_EDM_IN        | HR_NL_EDM_IN         | • RPCEDKN0 • RPCEDZN0                       |
| HR_NL_EDM_IN_DIR    | HR_NL_EDM_IN         | • RPCEDKN0 • RPCEDZN0                       |
| HR_NL_EDM_OUT       | HR_NL_EDM_OUT        | • RPCEDMN0 • RPCEDZN0                       |
| HR_NL_LAA_DONE      | HR_NL_LAA_DONE       | • RPCLAKN0 • RPCLAZN0                       |
| HR_NL_LAA_IN        | HR_NL_LAA_IN         | • RPCLAKN0 • RPCLAZN0 • RPULATN0            |
| HR_NL_LAA_IN_DIR    | HR_NL_LAA_IN         | • RPCLAKN0 • RPCLAZN0                       |
| HR_NL_LAA_OUT       | HR_NL_LAA_OUT        | • RPCLACN0 • RPCLAZN0                       |
| HR_NL_LAA_OUT_NEW   | HR_NL_LAA_OUT        | • RPCLACN0 • RPCLAZN0                       |
| HR_NL_PRNL_DONE     | HR_NL_PRNL_DONE      | • RPCPRKN0 • RPCPRZN0                       |
| HR_NL_PRNL_IN       | HR_NL_PRNL_IN        | • RPCPRKN0 • RPCPRZN0                       |
| Logical File Name   | Logical Path Names   | Reports That Use These Logical File Names   |
|---------------------|----------------------|---------------------------------------------|
| HR_NL_PRNL_IN_DIR   | HR_NL_PRNL_IN        | • RPCPRKN0                                  |
| HR_NL_PRNL_IN_NEW   | HR_NL_PRNL_IN        | RPCPRZN0                                    |
| HR_NL_PRNL_OUT_NEW  | HR_NL_PRNL_OUT       | RPCPRZN0                                    |
## Sensitive Data
The Human Resources infotypes often contain sensitive data. This data is protected by central authorization objects. For the local version for the Netherlands, this includes the national identification number (BSN number) in the Personal Data (0002) infotype.
## Related Information
Payroll (PY) [page 245]