1. Switch to the List tab and select the Role you want to work with from the Available Roles (Role Name) drop-down menu.

2. Switch back to the Permission to Object Types tab.

3. Choose by attribute value in the Select area. The Working Area now displays the fields for specifying attributes.

Selecting Permission entry by attribute value

4. Select the Business Object Type in the Object Type drop-down menu.

Selecting Object Type

5. Click the radio button next to the Variable attribute combo box.

6. The list of attributes offered by the Variable attribute combo box is now filled with the attributes of the selected BO Type. Click the left mouse button in this field to display and select the attributes in a treeview.

Selecting attributes in the Variable attribute combo box

7. Select the user variable in the User Variable combo box.

Selecting attributes in the User Variable combo box

Working area: Authorization by Attribute (Variable)

8. Set the value (Right) of the authorization using the Select Rights radio-button bar. The default setting of the control is No Read.

9. Add this authorization to the role by clicking Add button.

Note: See Preventing Conflicting Authorizations and Resolving Conflicting Authorizations topics for information about conflicting authorizations which may occur.

10. Click Apply to keep changes or, when prompted to save changes on exit, click OK to confirm.