Concept of authorizations in WP1

The access is defined by 2 parameters:


• The role itself, corresponding to a job, a responsibility, for example "EHS Admin" or "SDS Writer"

• The perimeter (usually BU or corporate level, aka "platform")

Additionally, options can be added to the role, to manage:

• R&D products (i.e products stored in the R&D authorization group of the BU)

• Confidential products (i.e products stored in the Confidential authorization group of the BU)

We have the possibility to separate between « display mode » and « edit mode »

Users are assigned "Composite" roles, that contain several "Simple" roles. For example the composite role "SDS Writer" includes the simple role "EHSM010- Manage Reports" allowing release of SDS in CG50.

Actors involved in the process


Role definition

• EH&S Role Owner: Responsible for validating role definition from an HSE perspective

• IT Domain Process Leader: Responsible to define authorization profiles from an IT perspective

• IT Security team: Responsible to set up the roles in SAP and ensure that the process is respected through ad hoc procedures

Role allocation


• Requester: the final user or his/her manager

• Approver: for some roles a double validation is in place, from the manager and the functional approver

• At GBU level: WW Product Stewards + backup (or Sandra Quintino for the Hazcom Service On Demand)

• At PRA/PS level: Marie Flourié


Workflow for user creation and/or EHS role allocation




When you create a ticket in freshdesk, the helpdesk will open a request for you in the "GRC Cup" tool (EXCEPT for Cytec legacy users or Technology Solutions roles that are going through the new tool being deployed: "IDM")


The typical access of a Product steward / SDS Writer should include

Roles to be provided


to be derived for the correct GBUs


If you know already which role(s) to request (see description of roles below), note that you can also create the request yourself in GRC CUP, everyone has access. See dedicated tutorial here.

EH&S roles at PRA/PS level


EHS administrator (EHS001)

• Can manage (= edit mode) all the specifications: PURE_SUB (including IH), LIST_SUB, LS_UN_SUB, PROD_COM (all groups, including raw materials, R&D and confidential ones)

• Phrase management

• Can manage rules via access to the EHS Expert rule server (role EHSM005 -COM- Administration Tools)

Expert and technician DRC (EHS003)

• Display PROD_COM for all GBUs

• Can view all PURE_SUB

• Options = additional roles :

• EHSM035 -OBJ-CPY-IND- Access Confidential products for Expert and Technician (DRC)

• EHSM036 -OBJ-CPY-IND- Access R&D products for Expert and Technician (DRC)

Raw Material Product Steward (EHS007)

• Edit mode for products assigned to the Raw Materials Authorization group (ZZ_BU_00), compositions and properties (everyone else only has display access)

• In display mode access to all authorization groups

Dangerous Good Administrator (EHS008)

• DG_CL_SUB management (= edit mode and creation)

• DOT phrase management (static phrase)

• Option = additional role :

• EHSM032 -OBJ-CPY-IND- Manage R&D products for Dangerous Good Administrator

• EHSD007-IND- Display Specifications : enables all PROD_COM visualization

SDS Writer for Corporate R&D products (EHS006)

• R&D PROD_COM creation (in the dedicated authorization group Corporate R&D)

• PURE_SUB R&D management (in the dedicated authorization group ZZ_RD)

• SDS and labels authoring for Corporate R&D

Certificates Administrator (EHS012)

• Manage Certificates phrases library, classes and certificates

OH Administrator (EHS013)

• Edit access only for OH classes in the OH Property Tree

• Access to specific reports

• Edit access to PURE_SUB to run the OH rule

OH Viewer (EHS014)

• Display access only for the OH PURE_SUB property tree


EH&S roles at GBU level

Dangerous Good Contact (EHS005)


• DG_CL_SUB assignment to PROD_COM

• Run DG master filling (DGE5)

• Edit phrases - restricted to DG phrases (specific library)

• Edit mode for the PROD_COM of the relevant BU

• Transport label, Tremcard and Transport Sheet generation

• Options = additional roles :

• EHSM030 -OBJ-CPY-IND- Manage Confidential products for Dangerous Good Contact

• EHSM031 -OBJ-CPY-IND- Manage R&D products for Dangerous Good Contact

Enterprise Product Steward (EHS002)


• BOM/BOS interface management (specific transaction)

• MAXIMALIST management (specific transaction, EP)

• Edit mode for the PROD_COM of the relevant BU

• SVT reporting consultation

• Option = additional role :

• EHSM034 -OBJ-CPY-IND- Manage Confidential Products for Product Steward

SDS Writer for commercial products (EHS004)

• SDS and labels authoring: edit mode for the PROD_COM of the relevant BU

• Exposure Scenario management (contributing scenario creation)

• Option = additional role :

• EHSM033 -OBJ-CPY-IND- Manage Confidential products for SDS Writer


SDS Writer for R&D products (EHS006)

• R&D PROD_COM creation (in the dedicated authorization group R&D of the BU)

• PURE_SUB R&D management (in the dedicated authorization group ZZ_RD)

• SDS and labels authoring for the GBU R&D


Product Steward Display only (EHS015)

• Display only access to the PROD_COM of 1 BU by the Product Steward of another BU

• The goal is to be able to see and use the products of 1 BU that may be used as raw materials in the Exact Compo Based on Products for another BU

• Access to this role will be authorized by the BU approver

TDS Writer (EHS009)

• Manage phrases for TDS (specific library)

• Manage specific classes for TDS Property Tree

• Display for standard classes, all property trees

• Generate TDS


TDS Viewer (EHS010)

• Display phrases for TDS

• Display classes included in TDS Property Tree

• Display TDS

Certificates Writer (EHS016)


• Manage Certificates classes

• Generate Certificates