## 13.7.1  Role Administration in Service
SAP S/4HANA Service comes with a set of pre-defined business roles. For information about managing business roles for SAP S/4HANA Service, see the product assistance for SAP S/4HANA on SAP Help Portal at https:/ /help.sap.com/s4hana\_op\_2021 under:
- Enterprise Business Applications Service Service Overview Business Roles in Service
- Enterprise Business Applications Service WebClient UI Framework Business Roles
For more information about the security aspects for the role concept that is used for Web UI Framework, see the section Web UI Framework [page 613] in this security guide.
For details on the required business roles, see the component-specific sections of this security guide.
## Specifics for the Service Professional Business Role
## Why Is Security Necessary?
Security is necessary to prevent attacks from the Internet and to protect data.
The Service Professional business role can perform functions such as broadcasting messages to agents or configuring alerts. For this reason, care must be taken that the Service Professional is assigned only to very specific persons. Otherwise, misleading information could be broadcast to agents, or critical information could be stolen.
## Checklist
| Feature                               | Check                                                                      | How to Check                                                                                                                                                                                                                                   |
|---------------------------------------|----------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Broadcast messaging for su- pervisors | For authorization object CRM_BM , check that field ACTVT has a value of 16 | In the profile generator (transaction PFCG ), enter role SAP_S4C_UIU_SRV_PRO or any role used to create supervisors, and choose Display . On the Authorizations tab, choose Display Authorization Data . Choose Utilities Technical names on . |
## Authorizations
The Service Professional uses the standard for authorizations provided by SAP S/4HANA Service.
The backend role SAP\_S4C\_UIU\_SRV\_PRO is delivered with the Service Professional .
The following table contains the security-relevant authorization objects used in the Service Professional scenario:
| Authorization Object   | Field                     | Value                                                                                                                                                                      | Description                                                                                                                               |
|------------------------|---------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------|
| CRM_BM                 | ACTVT : Activity          | 16                                                                                                                                                                         | Only users with this author- ization in their user profile can start the broadcast mes- saging server application.                        |
| CRM_ERMS_P             | ACTVT ERMS_CTXT ERMS_AUGR | 01, 02, 03, 43 Any context defined in Customizing (transaction CRMC_ERMS_REPOSITORY ) Any authorization group defined in Cus- tomizing (transaction CRMC_ERMS_REPOSITORY ) | Defines which rule policies the Service Professional is al- lowed to work with and what activities within these poli- cies are permitted. |
## Further Information
Role Administration [page 13]