cancel
Showing results for 
Search instead for 
Did you mean: 

ILM - Role needed to display archived data

0 Kudos

Hi All,

We are implementing ILM-Archiving.

Roles needed for the configuration are clear.

But we would like to know which is the role in ILM needed for end users to display the archive data. Do you know which is the SAP role or Authorization Object needed.

Thanks,

Jaime

View Entire Topic
Nico1966
Explorer

As soon as you activate the ILM_BLOCKING business function, transaction IRMPOL offers you the new Authorization Group column. In addition to the authorization object S_ARCHIVE, users need to have the rights for the Authorization Group entered in this column if they want to access archived data.
As soon as you have archived the data, you are protected by additional authorizations, so that archive access is effectively protected.

The check is carried out using the authorization object S_IRM_BLOC (Blocking of archived data) and, in case there is a legal hold put of archived data, A_IRM_BL_M (Access to expired data with legal holds).
In SU24 you can consult the documentation for authorization object S_IRM_BLOC. Activity 3 = display archived data.

BR, Nico Kuijper

0 Kudos

Hi Nico,

Many thanks for your answer!!!

At the moment we are in an initial stage and we are not activating the blocking.

At the moment we are maintaining in ILM only the Retention rules.

In this case, I guess we only need for the users the Authorization Object S_ARCHIVE, correct?.

Compared with the traditional archiving does not look that we have to maintain in the Authorization Objects the Content Repository, correct?.

Have checked the *IRM* and *ILM* Authorization Object and could not find in any of them the Authorization field OAARCHIV, that is used in the Authorization Object S_WFAR_OBJ to indicate the Content Repository in the traditional archiving.

Thanks,

Jaime