1. Switch to the List tab and select the Role you want to work with from the Available Roles (Role Name) drop-down menu.

2. Switch back to the Permission to Object Types tab.

3. Choose by instance in the Select area. The Working Area now displays the filter dialog.

Selecting Permission entry by instance

4. Select the Business Object Type in the Object Type drop-down menu.

Selecting Object Type

5. Set a filter to find a particular instance of a BOs matching your condition (see Structure of the Full Search Window and corresponding topics for information about setting filters - searching).

Working area: Authorization by Instance

6. Select Search button. The results table will be filled with the output of the filter - business objects matching the condition. You can add as many conditions as are necessary to narrow down the selection, if needed. Click Reset to reset the filter and display the complete list again (see Full Search chapter for more information about setting the filter).

7. Select the instance(s) to which the authorization should be applied from the business objects listed by the filter output. Multiple items can be selected by dragging or holding CTRL or SHIFT while clicking.

8. Set the value (Right) of the authorization using the Select Rights radio-button bar. The default setting of the control is No Read.

9. Add this authorization to the role by clicking Add button.

Note: See Preventing Conflicting Authorizations and Resolving Conflicting Authorizations topics for information about conflicting authorizations which may occur.

10. Click Apply to keep changes or, when prompted to save changes on exit, click OK to confirm.