Authorization Control in XCM

Overview

Authorization control in XCM is handled for several functions via the authority object /XCM/CR. To control the authorization, use authority object with the fields assigned for each function as mentioned below

  1. Maintain Process Builder

    • ACTVT = PR -
  2. Maintain BRF+ Decision Table

    1. Modify BRF+ Decision Table

      • ACTVT = 23
    2. Activate BRF+ Decision Table

      • ACTVT = PU
  3. Complete MDG-Request Task of Change Record Process

    • ACTVT = CO

BAdI for authorization control

  • To overcome the authorization control by the authority object /XCM/CR for maintaining the Process Builder for each CR, implement the BAdI /XCM/PR_EX_PROCESS_BUILDER. This implements a method to allow each actions mentioned below

    • EDIT TASK
    • DELETE TASK
    • ACTIVATE/DEACTIVATE TASK
    • ADD AGENT
    • DISABLE AGENT
    • COPY TASK
  • With the governance feature added to BRF+ decision table as per point 1 in 2026.1.0 - Governance for BRF+ and XCM customizing, MDG cockpit, email function to address the users responsible for activation requires a BAdI implementation. Agents for sending email to BRF+ Activation admins is handled by implementing the BAdI /XCM/EX_BRF_ADMIN

  • In order to perform validation before or actions after completion of the MDG task for Change Record, implement the BAdI /XCM/CR_EX_COMPLETE_MDG_REQ. This implements 2 methods BEFORE_COMPLETE_MDG_REQUEST and AFTER_COMPLETE_MDG_REQUEST.

Prerequisites

Keywords

record type, type, Change Record