{"id":28523,"date":"2021-08-16T06:20:57","date_gmt":"2021-08-16T06:20:57","guid":{"rendered":"https:\/\/compliancenow.nagarro-es.com\/?page_id=28523"},"modified":"2022-12-12T10:59:19","modified_gmt":"2022-12-12T10:59:19","slug":"apm","status":"publish","type":"page","link":"https:\/\/compliancenow.eu\/en\/insight\/faq\/apm\/","title":{"rendered":"Authorization Process Manager"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Homepage<\/a><\/span><\/span><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

FAQ - Authorization Process Manager<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

See our collection of questions in the FAQ – Authorization Process Manager<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"APM\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

FAQ - Authorization Process Manager<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Our Authorization Process Manager tool has been around for more than 13 years and has served hundreds of international customers. We have constantly been developing it throughout the years, and the feedback we have received from our many customers has been invaluable in order to build the most efficient tool for testing authorizations. We have collected the most common and relevant questions regarding Authorization Process Manager for you to learn about the more technical functions of APM.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tDoes APM support authorization errors discovered in Fiori Launch Pad?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

APM supports simultaneous Fiori authorization error reporting as well as error correction in both layers.<\/p>

This means that when a tester is testing through the Fiori Launchpad and is stopped by an authorization error, the tester can report the error directly from the Fiori Launchpad and hereafter update the missing access, thereby enabling the continuation of the test. Errors from both layers will be forwarded and registered in the APM Cockpit.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tHow long does it take for you to get an authorization error reported, corrected and tested?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

Testers can execute the test from the initial screen of SAP, from the Fiori LaunchPad, or from the test screen delivered from APM.<\/p>

If facing an authorization error, the tester simply uses the relevant APM SU53 error report dedicated for the test-user to report and update the error.<\/p>

After a 10-15 second break entering the error description, APM automatically updates the test-user privileges, and the tester continues the functional testing.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tIs it possible to test authorization in a productive environment?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

It is possible to allow singled-out users to be able to update authorization errors blocking their daily work in production. All updates will be monitored, and real-time email notifications can be activated.<\/p>

The restriction functionality can even reduce the scope and ability to update access, reducing the user to only report missing access. A number of our customers have utilized this concept to eliminate the use of SAP_ALL or wide support roles in the production.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tCan I restrict what a user(s)\/test-user(s) can update in roles assigned to own user?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

The restriction functionality can reduce the scope and ability to update access, reducing the user to only report missing access or, if restricted, only report the error identified.<\/p>

It is possible to restrict on Object Class, Objects, Transaction code, Organisational level, and Field values on the specific client being tested on. Restrictions can be useful when designing the different test phases \u2013 e.g., when needing to restrict the update possibilities in a user acceptance test compared to the initial role unit testing being less restrictive.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tCan the administrator be notified when user(s)\/testuser(s) updating access in their personal test container?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

Notifications can be configured to enable emails to be sent to administrators (responsible users) when any user performs updates to the test container. In larger-scale test cycles, this might not be relevant (due to the number of reported errors), but supporting tests in different time zones or production usage of APM email notification can be helpful.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tCan I use APM in productive environment and replace SU53 with APM_SU53?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

APM supports the standard process, routing authorization errors from productive users experiencing inadequate privileges in their daily tasks in SAP. APM will efficiently collect the relevant data directing the error message to the SAP Compliance Team for further investigation.<\/p>

In particular, organizations with operations across time zones and with a central SAP Solution Centre will benefit from the structured, documented, and efficient error-handling process. Productive users will not be able to update their access, only report authorization errors.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tIs APM interfacing the module Access Control so potential new SoD conflicts etc. will be reported if occurs during test container update?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

No \u2013 preventive check in Access Control is disabled when the APM-test container role is updated. If new SoD conflicts occur analyzing an update on a user\u2019s APM Test Container the SoD will be identified when updating the business role and processing a risk report in Access Control.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat to expect in terms of time reduction using APM compared to the standard process?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

A huge reduction in the effort of testing can be expected \u2013 up to a 75% reduction in time spent by testers. Furthermore, it offers the potential for saving an entire test cycle since authorization tests can be performed along with integration tests.<\/p>

Furthermore, the authorization team can save time in the design and build phase of the roles as well as administration of the test being executed. Some customers report that the elimination of the frustration among the testers dealing with authorizations errors and the satisfaction of a smooth test run is the key value.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tCan I monitor the test and deliver reports in real-time?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

The reporting module delivers a sub-set of reports giving the real-time status of the test being executed and enabling download of all error-related information for documentation purposes.<\/p>

The reporting supports information about the technical details about the errors being reported as well as similar issues. Project management is supported by a test execution overview and other status reporting options supporting validation of the progress as well as the quality of the test.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat is the difference between APM Error Reporting and One-click?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

When a tester is facing an authorization error two options for updating can be configured for the individual test user. The user can have the option of reporting the error specifying test case ID, test case number, and leaving a comment for the authorization team followed by submitting the form and continuing the test.<\/p>

The alternative is the One-click. Here the tester, when facing an authorization error, goes one step back push the \u201cOne-click\u201d reporting button and APM will make the update in the background and restart the transaction code getting the tester ready to continue testing.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t