Defining Support Roles in PCC and Related Tasks in Configuring PCC

Objective

After completing this lesson, you will be able to define support roles in PCC

The Set Up of PCC as Super User

Roles in PCC

In this unit, you’ll learn about setting up the different PCC roles. Business users work in the test and production systems, while technical specialists work in the development system, and in some cases, in the test system. There are quite a few roles that a customer can implement.

This unit will introduce each role, and subsequent units will provide greater detail on how to execute each of their essential tasks.

In this unit, you’ll learn about setting up the different PCC roles. Business users work in the test and production systems, while technical specialists work in the development system, and in some cases, in the test system. There are quite a few roles that a customer can implement.

Support Roles

Roles are divided into two categories: Business Roles and Support Roles.

Roles are divided into two categories: Business Roles and Support Roles.

PCC Technical Consultant

Let's take a closer look at your role as a technical specialist in PCC. A technical consultant is similar to a superuser.

The image shows a photo of a Technical Consultant. When this occurs later in the content, it means that corresponding tasks are to be completed by the Technical Consultant.
Role nameResponsible for
Superuser / ConsultantThe initial PCC setup
Set up and launching new functionality
Initial customization of policy type, process type, validation rule types, and so on
The correctness and timeline of the implementation of PCC
RoleTasks/transactions/application
ConsultantActivate the business functions (t-code SFW5)
Activate and maintain OData services (t-code /IWFND/MAINT_SERVICE)
Activate UI Applications (t-code SICF)

Maintain initial settings for batch processing

Maintain Recurrence for Daemon Jobs

Maintain Recurrence for Event Handler Jobs

Maintain Recurrence for Regular Wrap up Jobs

Maintain Data Base Access Option

Generate General Process ID

Maintain General Settings (t-code PYC_ADM_TRANSACTION)

Apply SAP Best Practices business configuration for customer’s Payroll Control Center implementation based on Manage Configuration application
Configure policy types, process types, validation rule types, validation rules, KPI types, KPIs, Analytic Designer types, RCA, KPI drill-down, and so on (t-code PYC_CONF_WB and Manage Configuration Application).

PCC Content Manager

The PCC Content Manager primarily works in the development system. It is possible for business users to perform customization in the Manage Configuration app. In this case, it is recommended to provide access to Manage Configuration for business users not in the production system but in development.

The image shows a photo of a PCC Content Manager. When this occurs later in the content, it means that corresponding tasks are to be completed by the PCC Content Manager.
RoleTasks
PCC Content Administrator

Create/update object types (such as process type, VRT, KPI type), adapting Best Practice Solutions for the customer’s requirements

(transaction PYC_CONF_WB)

Configure validation rules, KPIs, analytics, and analytics designer, adapting Best Practice Solutions for the customer’s requirements (Manage Configuration app)

Support of PCC as Back-End Admin

PCC Administrator

Next, let’s look at the tasks of the PCC Administrator.

The image shows a photo of a PCC Administrator. When this occurs later in the content, it means that corresponding tasks are to be completed by the PCC Administrator. Next, let’s look at the tasks of the PCC Administrator.
RoleRole DescriptionTasks
SAP_HR_PYC_BACKEND_ADMINPCC: Payroll Control Center Administrator

Maintain user list for master data maintenance

Maintain lock entries for team configuration, policy configuration, process configuration, and so on (transaction PYC_ADM_TRANSACTION)

Delete the declustered payroll results by running report RPCDCT_DEL_DCT_DATA

Configuration of PCC as a Consultant

Configuration Steps

Next, let’s look at the steps for configuration as a PCC Consultant.

On the image, let’s look at the steps for configuration as a PCC Consultant. Steps are the following. Step 1 - Call transaction PFCF (Role Maintenance). Step 2 - Press F4 for help what to enter. Step 3 - In the Single Role field, enter SAP*HR*PCY, choose start search, and press Enter. Step 4 - Choose a required standard business role.

To find all listed above standard business roles:

  1. Call transaction Role Maintenance (transaction code PFCG).
  2. Press the F4 key or choose the button to the left of the Role field.
  3. Type SAP*HR*PYC in the Single Role field, choose Start Search, and choose ENTER.
  4. Choose a required standard business role.

Transaction PFCG: Useful Options

The image shows some useful options for transaction PFCG.

The image shows some useful options for Transaction PFCG.

Create a New Role Based on the Standard Role

To create a new role from scratch, you can use Transaction PFCG. You can also use the standard roles as a basis and make changes to them as required. In this case, SAP strongly recommends copying the standard roles and then making the required changes to the copies of the standard roles.

More detailed information about roles, authorization profiles, and specific payroll authorization objects can be found in the course HR940 Authorization in SAP ERP HCM. This course covers only roles and authorization objects associated with PCC.

You can also combine several single roles into a composite role to meet the client’s business requirements. These tasks are not the responsibility of the application consultants or specialists involved in the PCC implementation or support.

The image shows steps 1 to 5 how to create a new role based on a standard role. These are: Step 1 - Choose an appropriate standard role. Step 2 - Click on the Copy button located in the top left corner of the screen. Step 3 - Input the new role name in the to role field. Step 4 - Select the Copy all button. Step 5 - Opt for the Change option for your new role.
The image shows steps 1 to 5 how to create a new role based on a standard role. These are: Step 6 - Change your new customer role description. Step 7 - Choose the Menu tab. Step 8 - Choose the Insert Nodes button and add the required menu options. Step 9 - Save. Step 10 - Add necessary authorization and generate the profile. Step 11 - Update user’s assignments (if necessary).

To create a new role based on the standard role:

  1. Select a suitable standard role.
  2. Choose the Copy button in the upper left corner of the screen.
  3. Enter the new role name in the to role field.
  4. Choose the Copy all button.
  5. Choose the option Change for your new role.
  6. Change your new customer role description.
  7. Choose the Menu tab.
  8. Choose the Insert Nodes button and add the required menu options.
  9. Save your updates.
  10. Add necessary authorization and generate the profile.
  11. Update user’s assignments (if necessary).

Create a New Role for Team Lead Based on the Standard Role

Business Example

As a security administrator, you need to update your PCC standard role settings. To do this, you will copy the PCC standard role and make the necessary changes. In Unit 9, we will cover authorizations in more detail.

Note

Please note that using SAP standard sample roles directly is not recommended. These sample roles list all the essential authorization objects. It is preferable to copy them and adjust the authorization field values to meet the customer's needs.

Steps

  1. Create a new user Z##_USER.

    1. Access transaction SU01. From the SAP Easy Access screen, choose Tools → Administration → User Maintenance → Users (SU01).

    2. Enter Z##_USER in the field User.

    3. Click on the icon Create in the upper left corner of the initial transaction screen.

    4. Enter Z##_USER in the Last Name field on the Address tab.

    5. Click on the Logon Data tab and enter the password Welcome1 to the New Password and Repeat Password fields.

    6. Enter TRAINING in the User group field.

    7. Enter EN in the Logon Language field on the Defaults tab page.

    8. Save your entries.

  2. Copy a standard role SAP_HR_PYC_TM_MNG.

    1. Access transaction PFCG.

      On the SAP Easy Access screen, choose the SAP Menu button or select Tools → Administration → User Maintenance → Role Administration → Roles (PFCG).

    2. Select a standard role SAP_HR_PYC_TM_MNG.

    3. Click on the Copy button in the upper left corner of the screen.

    4. Enter the new role name Z##_ HR_PYC_TM_MNG in the field to role.

    5. Click on the button Copy all.

    6. Click on the option Change for your new role.

    7. Change your new customer role Description to Z## PCC: Team Management.

  3. Add transaction the SU53 Evaluate Authorization check transaction and /IWFND/ERROR_LOGSAP Gateway Error Log transaction to the menu of the newly created role.

    1. Click on the option Change for your new role.

    2. Click the button Insert Nodes → choose option Transaction and add the SU53 Evaluate Authorization check transaction and /IWFND/ERROR_LOG SAP Gateway Error Log transaction.

    3. Save your entry.

  4. Configure authorization for the Z##_ HR_PYC_TM_MNG role and generate the authorization profile.

    1. Click on the Authorization tab.

    2. Choose the pen icon Change authorization data at the bottom of the screen under Edit Authorization Data and Generate Profiles.

    3. Click on the yellow triangle (Missing value) for Basis: Administration and then click on the green checkmark in the lower right corner of the pop-up window (Execute / Enter). After this, the traffic light to the left of the authorization object class name should turn green.

    4. Repeat the same steps for Basis: Central Functions and Human Resources authorization object class.

    5. When all the traffic lights to the left of the authorization object classes turn green, select the Generate icon to generate the authorization profile of the newly created role.

    6. Choose back to return (the green arrow) to return to the Change role screen.

  5. Assign Z##_USER to the newly created role.

    1. Click on the tab User.

    2. Assign Z##_USER from 01.01 current year to 31.12.9999.

    3. Save your entry.

    4. Click on the User Comparison button.

    5. Choose Full comparison button in the lower right corner of the pop-up screen Compare Role User Master Record.

    6. Then, choose Cancel in the lower right corner of the pop-up screen with comparison status.

  6. Save the newly created role Z##_ HR_PYC_TM_MNG.

Log in to track your progress & complete quizzes

Learning

SAP FacebookSAP YoutubeSAP LinkedIn