SAP Security Online!
 
 
Web SAPSecurityOnline.com
 
   
 
 
 

 

Enterprise Buyer Professional ( E B P )
EBP has been developed to increase efficiency in the procurement process. This is achieved through the use of on-line catalogues containing approved vendors and goods where a users can request the  supply of goods through a ‘shopping basket’ process.

Security consideration
  • The EBP system resides on a separate instance of SAP and interfaces with a core SAP system. The EBP system Basis components should be appropriately configured and secured.
  • Consideration should be given to configuration of Personalization settings at an individual or role level. These may include the following:

 

Personalisation Object Key

Description

BBP_APPROVAL_LIMIT

Highest value of shopping cart that can be approved

BBP_WFL_SECURITY_BADI

Specifies whether change can be made or what actions should be taken when changes are made to a shopping cart during the approval process. Consideration should be given to forcing the approval process to re-start when changes are made.

BBP_SPENDING_LIMIT

Value above which approval is necessary

 

EBP administration transactions as well as EBP end user transactions should be appropriately restricted. These include, but are not limited to:

 

Tcode

Name

Description

BBPAT03

Create User

EBP transaction used to create a user ID.

BBPAT04

Forgotten User ID/Password

EBP transaction to request / apply for
password and user ID.

BBPAT05

Change User Data

Transaction used to change or display EBP user details.

BBPIV01 – 03

Entry of Invoice

EBP transactions used to enter invoices.

BBPPU07

Access to the Managers Inbox

EBP transaction used to access Manager's Inbox and related information.

BBPAT05

Change User Data

Transaction used to change or display EBP user details.

BBP_BW_SC3
BBP_BW_SC4

Shopping Carts per product
or per Cost Center

Business Warehouse reports used to display summarized shopping cart information.

 
Useful reports
EBP is an extension of existing procurement functionality and, as such, core SAP reports applicable to procurement are equally applicable to EBP processes. Workflow is key to successful operation of EBP. Work items may be left in error or not resolved resulting in failure of the EBP process. Processes should be put in place for the running of control reports to ensure that all transactions are processed appropriately. Consideration should also be given to reviewing reports detailing catalogue content changes for all external catalogues to ensure these are appropriate.

 




 
Copyright © 2005 - 2007 SAP Security Online.com All Rights Reserved.