SAP Sustainability Control Tower uses a role-based authorization model for access control.
In SAP Sustainability Control Tower, a role refers to a defined set of permissions that determine what a user can do within the system. For example, a SUS_SCT_Administrator role has full permissions to edit and configure settings and content, while a SUS_SCT_Reader role only has permissions to view specific information. These roles help manage access and maintain security within SAP Sustainability Control Tower.
Sometimes, roles have overlapping functions, for instance in data management and viewing capabilities. The following roles share common responsibilities related to data management, which include tasks such as uploading and modifying data:
- SUS_SCT_DataManager
- SUS_SCT_Sustainability_Metrics_Catalogue_Data_Manager
- SUS_SCT_Manage_ESG_Data_Manager
However, it is important to note that each role also possesses unique permissions.
When one user needs to perform tasks that fall under different roles, you can use role collections. For instance, a performance analyst might need to combine the roles of SUS_SCT_DataManager and SUS_SCT_Sustainability_Metrics_Catalogue_Data_Manager to fully perform their duties. Similarly, a user might need to have both SUS_SCT_EU_Taxonomy_Sustainability_Expert and SUS_SCT_EU_Taxonomy_Admin roles to manage and administer tasks related to the EU Taxonomy applications.