{"id":111431,"date":"2018-01-26T15:44:57","date_gmt":"2018-01-26T14:44:57","guid":{"rendered":"https:\/\/www.applus-erp.de\/wissen\/glossar\/berechtigungskonzept\/"},"modified":"2025-11-11T14:38:17","modified_gmt":"2025-11-11T13:38:17","slug":"berechtigungskonzept","status":"publish","type":"glossar","link":"https:\/\/www.applus-erp.de\/en\/knowledge\/glossary\/berechtigungskonzept\/","title":{"rendered":"Authorization concept"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">An authorization concept is a precisely defined set of rules. It defines the access rights to the data and functions of an IT system. The individual processes required to implement the authorization concept are also generally described. This applies, for example, to the creation and deletion of users and the specifications for password creation.   <\/p>\n\t\t<div data-elementor-type=\"section\" data-elementor-id=\"113478\" class=\"elementor elementor-113478 elementor-23433\" wpc-filter-elementor-widget=\"1\" data-elementor-post-type=\"elementor_library\">\n\t\t\t<div class=\"elementor-element elementor-element-7f7ddec e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"7f7ddec\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-00fb37a elementor-grid-1 elementor-grid-tablet-2 elementor-grid-mobile-1 elementor-widget elementor-widget-loop-grid\" data-id=\"00fb37a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;template_id&quot;:112968,&quot;columns&quot;:1,&quot;_skin&quot;:&quot;post&quot;,&quot;columns_tablet&quot;:&quot;2&quot;,&quot;columns_mobile&quot;:&quot;1&quot;,&quot;edit_handle_selector&quot;:&quot;[data-elementor-type=\\&quot;loop-item\\&quot;]&quot;,&quot;row_gap&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"loop-grid.post\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-loop-container elementor-grid\" role=\"list\">\n\t\t<style id=\"loop-112968\">.elementor-112968 .elementor-element.elementor-element-71faf02{--display:flex;--flex-direction:row;--container-widget-width:calc( ( 1 - var( --container-widget-flex-grow ) ) * 100% );--container-widget-height:100%;--container-widget-flex-grow:1;--container-widget-align-self:stretch;--flex-wrap-mobile:wrap;--align-items:center;--gap:40px 40px;--row-gap:40px;--column-gap:40px;}.elementor-112968 .elementor-element.elementor-element-2bc2467 img{max-width:270px;}.elementor-112968 .elementor-element.elementor-element-2bc2467{margin:0px 0px calc(var(--kit-widget-spacing, 0px) + 0px) 0px;}.elementor-112968 .elementor-element.elementor-element-7876078{--display:flex;}.elementor-112968 .elementor-element.elementor-element-180f467 .elementor-heading-title{font-family:\"Nunito\", Sans-serif;font-size:32px;font-weight:900;text-transform:none;line-height:1.2em;color:var( --e-global-color-secondary );}.elementor-112968 .elementor-element.elementor-element-1c48798{color:var( --e-global-color-secondary );}.elementor-112968 .elementor-element.elementor-element-5a57b9a .elementor-button{font-size:18px;font-weight:500;fill:#707070;color:#707070;background-color:rgba(2, 1, 1, 0);box-shadow:0px 0px 0px 0px rgba(0,0,0,0.5);border-style:solid;border-width:0px 0px 4px 0px;border-color:var( --e-global-color-5a6c6f85 );border-radius:0% 0% 0% 0%;padding:10px 0px 6px 0px;}.elementor-112968 .elementor-element.elementor-element-5a57b9a .elementor-button:hover, .elementor-112968 .elementor-element.elementor-element-5a57b9a .elementor-button:focus{color:var( --e-global-color-secondary );border-color:var( --e-global-color-60921509 );}.elementor-112968 .elementor-element.elementor-element-5a57b9a .elementor-button:hover svg, .elementor-112968 .elementor-element.elementor-element-5a57b9a .elementor-button:focus svg{fill:var( --e-global-color-secondary );}.elementor-112968 .elementor-element.elementor-element-5a57b9a{margin:10px 0px calc(var(--kit-widget-spacing, 0px) + 3px) 0px;padding:0px 0px 0px 0px;width:auto;max-width:auto;}@media(max-width:1024px){.elementor-112968 .elementor-element.elementor-element-5a57b9a{margin:0px 0px calc(var(--kit-widget-spacing, 0px) + 0px) 0px;}}@media(min-width:768px){.elementor-112968 .elementor-element.elementor-element-71faf02{--content-width:800px;}.elementor-112968 .elementor-element.elementor-element-7876078{--width:66.6%;}}@media(max-width:767px){.elementor-112968 .elementor-element.elementor-element-71faf02{--gap:0px 0px;--row-gap:0px;--column-gap:0px;}.elementor-112968 .elementor-element.elementor-element-2bc2467{padding:0px 0px 0px 0px;}.elementor-112968 .elementor-element.elementor-element-7876078{--margin-top:0px;--margin-bottom:0px;--margin-left:0px;--margin-right:0px;--padding-top:0px;--padding-bottom:0px;--padding-left:0px;--padding-right:0px;}.elementor-112968 .elementor-element.elementor-element-180f467 .elementor-heading-title{font-size:30px;}.elementor-112968 .elementor-element.elementor-element-5a57b9a{margin:0px 0px calc(var(--kit-widget-spacing, 0px) + 0px) 0px;}}<\/style>\t\t<div data-elementor-type=\"loop-item\" data-elementor-id=\"112968\" class=\"elementor elementor-112968 elementor-63106 elementor-63106 e-loop-item e-loop-item-112288 post-112288 whitepaper type-whitepaper status-publish has-post-thumbnail hentry whitepaper_categories-erp-provider-selection content_category-erp-provider-selection\" wpc-filter-elementor-widget=\"1\" data-elementor-post-type=\"elementor_library\" data-custom-edit-handle=\"1\">\n\t\t\t<div class=\"elementor-element elementor-element-71faf02 e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"71faf02\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2bc2467 elementor-widget elementor-widget-image\" data-id=\"2bc2467\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.applus-erp.de\/en\/knowledge\/erp-provider-selection\/whitepaper-erp-provider-selection\/\" id=\"wp-cta-image\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" loading=\"lazy\" width=\"500\" height=\"624\" src=\"https:\/\/www.applus-erp.de\/wp-content\/uploads\/2025\/12\/cta-ipad-whitepaper-Anbieterauswahl-EN.png\" class=\"attachment-full size-full wp-image-83439\" alt=\"White paper Selecting ERP suppliers: get the most out of your ERP workshops\" srcset=\"https:\/\/www.applus-erp.de\/wp-content\/uploads\/2025\/12\/cta-ipad-whitepaper-Anbieterauswahl-EN.png 500w, https:\/\/www.applus-erp.de\/wp-content\/uploads\/2025\/12\/cta-ipad-whitepaper-Anbieterauswahl-EN-240x300.png 240w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7876078 e-con-full e-ecs-flex e-flex e-con e-parent\" data-id=\"7876078\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;}\">\n\t\t\t\t<div data-dce-title-color=\"#54595F\" class=\"elementor-element elementor-element-180f467 elementor-widget elementor-widget-heading\" data-id=\"180f467\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\"><a href=\"https:\/\/www.applus-erp.de\/en\/knowledge\/erp-provider-selection\/whitepaper-erp-provider-selection\/\" id=\"wp-cta-title\">Free Whitepaper<\/a><\/p>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1c48798 elementor-widget elementor-widget-text-editor\" data-id=\"1c48798\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tThere are countless ERP providers. Read on to find out what you need to look out for when making your choice. \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div data-dce-background-color=\"rgba(2, 1, 1, 0)\" class=\"elementor-element elementor-element-5a57b9a elementor-widget__width-auto res sec-link  elementor-widget elementor-widget-button\" data-id=\"5a57b9a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/www.applus-erp.de\/en\/knowledge\/erp-provider-selection\/whitepaper-erp-provider-selection\/\" id=\"wp-cta-button\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Request now for free<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\n<h2 class=\"wp-block-heading\">The importance of an authorization concept<\/h2>\n\n<p class=\"wp-block-paragraph\">Many companies already protect their IT systems very well against unauthorized access from outside. Firewalls and intrusion detection systems play their part in a secure IT landscape. In contrast, the threats to data security from within the company are often underestimated. This is where the authorization concept fits into the company&#8217;s security architecture. Ideally, only those employees who need access to certain data for their work should have access to it.    <\/p>\n\n<p class=\"wp-block-paragraph\">In principle, an authorization concept is the result of individual planning. If the defined rules are too strict, this can lead to a reduction in productivity. However, if the specifications of the concept are not strict enough, this can lead to problems with data security.  <\/p>\n\n<h2 class=\"wp-block-heading\">Basic concept and role<\/h2>\n\n<p class=\"wp-block-paragraph\">A basic concept defines which resources may be accessed by which users. The type of access is also defined here. For example, certain users may be allowed to read a data record, but not to change it. Due to the large number of possible combinations of users, resources and rights, this type of concept can very quickly become confusing.   <\/p>\n\n<p class=\"wp-block-paragraph\">Roles are now defined to ensure clarity and simple management of access rights. These form a precisely defined group of authorizations that can be assigned to a user. As a result, users only have access to the data they need to perform their tasks.  <\/p>\n\n<h2 class=\"wp-block-heading\">The importance of the authorization concept from the perspective of the GDPR<\/h2>\n\n<p class=\"wp-block-paragraph\">Until now, the following principle has often applied when designing an authorization concept: people should only be able to access data that is intended for their inspection. Conversely, they must not have access to data that is not intended for them. This is changing with the implementation of the GDPR. A corresponding concept must now be expanded to include the principle of <strong>purpose limitation<\/strong>. This means that an employee may only access the data that they absolutely need to carry out their work and for the purpose of the original data collection.    <\/p>\n\n<p class=\"wp-block-paragraph\">There is also the <strong>documentation obligation<\/strong>. In future, every company must not only record the authorization concept, but also document its concrete implementation in a verifiable manner. <\/p>\n\n<p class=\"wp-block-paragraph\">As a concrete application example, no files with personal data should be sent as attachments by email. Instead, these files should be stored in folders on the server that are protected by the authorization concept. The release link can then be sent to the relevant colleagues by email.  <\/p>\n\n<h3 class=\"wp-block-heading\">Further reading:<\/h3>\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.datenschutz-notizen.de\/fehlendes-berechtigungskonzept-im-krankenhaus-ein-bussgeldbewaehrtes-risiko-0823168\/\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/www.datenschutz-notizen.de\/fehlendes-berec&#8230;<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/erp-news.info\/augen-auf-bei-der-omnichannel-kommunikation\/\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/erp-news.info\/augen-auf-bei-der-omnichanne&#8230;<\/a><\/li>\n<\/ul>\n\n<h3 class=\"wp-block-heading\">Legal notice:<\/h3>\n\n<p class=\"alert alert-info wp-block-paragraph\">The free and freely accessible content of this website has been created with the greatest possible care. However, we expressly point out that we assume no guarantee or other responsibility for the accuracy, currency or completeness of the journalistic guides and information provided on this website. \n<br\/><br\/>The content on this website is not intended as legal advice for your company on which you can rely for compliance with the legal regulations on data protection &#8211; in particular the GDPR &#8211; nor can it replace individual legal advice.\n<br\/><br\/>Furthermore, by accessing this free and freely accessible content, no contractual relationship is established between us and you as a user of the website in the absence of a corresponding legally binding intention on our part.\n\n<\/p>\n\t\t<div data-elementor-type=\"section\" data-elementor-id=\"113478\" class=\"elementor elementor-113478 elementor-23433\" wpc-filter-elementor-widget=\"1\" data-elementor-post-type=\"elementor_library\">\n\t\t\t<div class=\"elementor-element elementor-element-7f7ddec e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"7f7ddec\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-00fb37a elementor-grid-1 elementor-grid-tablet-2 elementor-grid-mobile-1 elementor-widget elementor-widget-loop-grid\" data-id=\"00fb37a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;template_id&quot;:112968,&quot;columns&quot;:1,&quot;_skin&quot;:&quot;post&quot;,&quot;columns_tablet&quot;:&quot;2&quot;,&quot;columns_mobile&quot;:&quot;1&quot;,&quot;edit_handle_selector&quot;:&quot;[data-elementor-type=\\&quot;loop-item\\&quot;]&quot;,&quot;row_gap&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"loop-grid.post\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-loop-container elementor-grid\" role=\"list\">\n\t\t\t\t<div data-elementor-type=\"loop-item\" data-elementor-id=\"112968\" class=\"elementor elementor-112968 elementor-63106 elementor-63106 e-loop-item e-loop-item-112288 post-112288 whitepaper type-whitepaper status-publish has-post-thumbnail hentry whitepaper_categories-erp-provider-selection content_category-erp-provider-selection\" wpc-filter-elementor-widget=\"1\" data-elementor-post-type=\"elementor_library\" data-custom-edit-handle=\"1\">\n\t\t\t<div class=\"elementor-element elementor-element-71faf02 e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"71faf02\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2bc2467 elementor-widget elementor-widget-image\" data-id=\"2bc2467\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.applus-erp.de\/en\/knowledge\/erp-provider-selection\/whitepaper-erp-provider-selection\/\" id=\"wp-cta-image\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" loading=\"lazy\" width=\"500\" height=\"624\" src=\"https:\/\/www.applus-erp.de\/wp-content\/uploads\/2025\/12\/cta-ipad-whitepaper-Anbieterauswahl-EN.png\" class=\"attachment-full size-full wp-image-83439\" alt=\"White paper Selecting ERP suppliers: get the most out of your ERP workshops\" srcset=\"https:\/\/www.applus-erp.de\/wp-content\/uploads\/2025\/12\/cta-ipad-whitepaper-Anbieterauswahl-EN.png 500w, https:\/\/www.applus-erp.de\/wp-content\/uploads\/2025\/12\/cta-ipad-whitepaper-Anbieterauswahl-EN-240x300.png 240w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7876078 e-con-full e-ecs-flex e-flex e-con e-parent\" data-id=\"7876078\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;}\">\n\t\t\t\t<div data-dce-title-color=\"#54595F\" class=\"elementor-element elementor-element-180f467 elementor-widget elementor-widget-heading\" data-id=\"180f467\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\"><a href=\"https:\/\/www.applus-erp.de\/en\/knowledge\/erp-provider-selection\/whitepaper-erp-provider-selection\/\" id=\"wp-cta-title\">Free Whitepaper<\/a><\/p>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1c48798 elementor-widget elementor-widget-text-editor\" data-id=\"1c48798\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\tThere are countless ERP providers. Read on to find out what you need to look out for when making your choice. \t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div data-dce-background-color=\"rgba(2, 1, 1, 0)\" class=\"elementor-element elementor-element-5a57b9a elementor-widget__width-auto res sec-link  elementor-widget elementor-widget-button\" data-id=\"5a57b9a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/www.applus-erp.de\/en\/knowledge\/erp-provider-selection\/whitepaper-erp-provider-selection\/\" id=\"wp-cta-button\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Request now for free<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\n<div class=\"wp-block-custom-faq-accordion\"><div class=\"faqab\"><h2 class=\"faqab-title\">FAQ zu Berechtigungskonzept<\/h2><div class=\"faqab-accordion\"><div class=\"faqab-item\"><details open><summary class=\"faqab-question\"><div class=\"faqab-question-header\"><div class=\"faqab-question-text\"><h2 class=\"faqab-h4\">Was versteht man unter einem Berechtigungskonzept?<\/h2><\/div><div class=\"faqab-question-icon\"><span class=\"faqab-icon faqab-icon-opened\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\" transform=\"rotate(180 12 12)\"><\/path><\/svg><\/span><span class=\"faqab-icon faqab-icon-closed\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><\/path><\/svg><\/span><\/div><\/div><\/summary><div class=\"faqab-answer\"><div>Ein Berechtigungskonzept ist ein genau definiertes Regelwerk, in dem festgelegt wird, welche Personen oder Nutzergruppen auf welche Daten und Funktionen eines IT-Systems zugreifen d\u00fcrfen, und wie diese Zugriffe technisch und organisatorisch umgesetzt werden sollen. <a href=\"\/?p=8908&#038;utm_source=chatgpt.com\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a><\/div><\/div><\/details><\/div><div class=\"faqab-item\"><details><summary class=\"faqab-question\"><div class=\"faqab-question-header\"><div class=\"faqab-question-text\"><h2 class=\"faqab-h4\">Welche zentralen Prinzipien gelten f\u00fcr ein Berechtigungskonzept?<\/h2><\/div><div class=\"faqab-question-icon\"><span class=\"faqab-icon faqab-icon-opened\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\" transform=\"rotate(180 12 12)\"><\/path><\/svg><\/span><span class=\"faqab-icon faqab-icon-closed\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><\/path><\/svg><\/span><\/div><\/div><\/summary><div class=\"faqab-answer\"><div>Zu den grundlegenden Prinzipien z\u00e4hlen etwa das Minimalprinzip (Nutzer*innen erhalten nur diejenigen Rechte, die sie f\u00fcr ihre T\u00e4tigkeit unbedingt ben\u00f6tigen) sowie das Prinzip der Funktionstrennung (z. B. darf eine Person nicht sowohl Auftr\u00e4ge freigeben als auch Rechnungen ausstellen), um Missbrauch und Fehler zu verhindern. <a href=\"https:\/\/www.roedl.de\/themen\/entrepreneur\/compliance\/erp-digitale-transformation-steuerabteilung-rollen-berechtigungen?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a><\/div><\/div><\/details><\/div><div class=\"faqab-item\"><details><summary class=\"faqab-question\"><div class=\"faqab-question-header\"><div class=\"faqab-question-text\"><h2 class=\"faqab-h4\">Warum ist ein Berechtigungskonzept f\u00fcr Unternehmen wichtig?<\/h2><\/div><div class=\"faqab-question-icon\"><span class=\"faqab-icon faqab-icon-opened\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\" transform=\"rotate(180 12 12)\"><\/path><\/svg><\/span><span class=\"faqab-icon faqab-icon-closed\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><\/path><\/svg><\/span><\/div><\/div><\/summary><div class=\"faqab-answer\"><div>Ein gut durchdachtes Berechtigungskonzept sch\u00fctzt sensible Daten und Gesch\u00e4ftsprozesse vor unbefugtem Zugriff oder Manipulation. Zudem unterst\u00fctzt es die Einhaltung von gesetzlichen Vorgaben wie der Datenschutz\u2011Grundverordnung (DSGVO) und tr\u00e4gt zur Nachvollziehbarkeit und Auditf\u00e4higkeit von Zugriffsrechten bei. <a href=\"https:\/\/www.dhpg.de\/de\/glossar\/berechtigungskonzept\/?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a><\/div><\/div><\/details><\/div><div class=\"faqab-item\"><details><summary class=\"faqab-question\"><div class=\"faqab-question-header\"><div class=\"faqab-question-text\"><h2 class=\"faqab-h4\">Wie wird ein Berechtigungskonzept typischerweise umgesetzt?<\/h2><\/div><div class=\"faqab-question-icon\"><span class=\"faqab-icon faqab-icon-opened\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\" transform=\"rotate(180 12 12)\"><\/path><\/svg><\/span><span class=\"faqab-icon faqab-icon-closed\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><\/path><\/svg><\/span><\/div><\/div><\/summary><div class=\"faqab-answer\"><div>Zun\u00e4chst werden alle relevanten Systeme und Datenbest\u00e4nde erfasst, anschlie\u00dfend Nutzerrollen und Funktionalit\u00e4ten definiert und berechtigungsrelevante Prozesse (z. B. Anlage und L\u00f6schung von Nutzerkonten) beschrieben. Danach folgt die technische Umsetzung im System, begleitet von Dokumentation, Schulung und regelm\u00e4\u00dfiger \u00dcberpr\u00fcfung. <a href=\"https:\/\/www.tenfold-security.com\/berechtigungskonzept-erstellen\/?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a><\/div><\/div><\/details><\/div><div class=\"faqab-item\"><details><summary class=\"faqab-question\"><div class=\"faqab-question-header\"><div class=\"faqab-question-text\"><h2 class=\"faqab-h4\">Wie h\u00e4ngt ein Berechtigungskonzept mit dem ERP-System eines Unternehmens zusammen?<\/h2><\/div><div class=\"faqab-question-icon\"><span class=\"faqab-icon faqab-icon-opened\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\" transform=\"rotate(180 12 12)\"><\/path><\/svg><\/span><span class=\"faqab-icon faqab-icon-closed\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><\/path><\/svg><\/span><\/div><\/div><\/summary><div class=\"faqab-answer\"><div>Im Kontext eines ERP-Systems wird das Berechtigungskonzept zur Steuerungsgrundlage daf\u00fcr, wer im System Daten einsehen, \u00e4ndern oder l\u00f6schen darf \u2013 z. B. in Bereichen wie Einkauf, Vertrieb, Finanzbuchhaltung oder Lager. Dadurch wird sichergestellt, dass im ERP-System nur autorisierte Mitarbeitende Zugriff auf relevante Funktionen haben, was die Datenintegrit\u00e4t und Prozesssicherheit erh\u00f6ht. <a href=\"https:\/\/www.roedl.de\/themen\/entrepreneur\/compliance\/erp-digitale-transformation-steuerabteilung-rollen-berechtigungen?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a><\/div><\/div><\/details><\/div><div class=\"faqab-item\"><details><summary class=\"faqab-question\"><div class=\"faqab-question-header\"><div class=\"faqab-question-text\"><h2 class=\"faqab-h4\">Was sind typische Herausforderungen bei der Umsetzung eines Berechtigungskonzepts?<\/h2><\/div><div class=\"faqab-question-icon\"><span class=\"faqab-icon faqab-icon-opened\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\" transform=\"rotate(180 12 12)\"><\/path><\/svg><\/span><span class=\"faqab-icon faqab-icon-closed\"><svg width=\"32\" height=\"32\" viewBox=\"0 0 32 32\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M6 9L12 15L18 9\" stroke=\"currentColor\" stroke-width=\"5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><\/path><\/svg><\/span><\/div><\/div><\/summary><div class=\"faqab-answer\"><div>Herausforderungen bestehen oft darin, eine ausgewogene Balance zwischen Sicherheit und Benutzerfreundlichkeit zu finden. Ist das Konzept zu restriktiv, kann dies die Produktivit\u00e4t hemmen; ist es zu locker, steigt das Risiko f\u00fcr Fehler oder Missbrauch. Zudem erfordert die Pflege des Konzepts kontinuierliche \u00dcberpr\u00fcfung und Anpassung bei ver\u00e4nderten Aufgaben oder Technologien. <a href=\"https:\/\/www.kleeberg.de\/2022\/11\/30\/das-berechtigungskonzept-notwendigkeit-und-definition\/?utm_source=chatgpt.com\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a><\/div><\/div><\/details><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>An authorization concept is a precisely defined set of rules. It defines the access rights to the data and functions of an IT system. The individual processes required to implement the authorization concept are also generally described. This applies, for example, to the creation and deletion of users and the specifications for password creation. The [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":108138,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"_lmt_disableupdate":"","_lmt_disable":"","_ppma_block_editor_authors":""},"tags":[],"whitepaper_categories":[2006],"glossar_tags":[2071],"ppma_author":[460],"class_list":["post-111431","glossar","type-glossar","status-publish","has-post-thumbnail","hentry","whitepaper_categories-erp-provider-selection","glossar_tags-dsgvo"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.applus-erp.de\/en\/wp-json\/wp\/v2\/glossar\/111431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.applus-erp.de\/en\/wp-json\/wp\/v2\/glossar"}],"about":[{"href":"https:\/\/www.applus-erp.de\/en\/wp-json\/wp\/v2\/types\/glossar"}],"author":[{"embeddable":true,"href":"https:\/\/www.applus-erp.de\/en\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.applus-erp.de\/en\/wp-json\/wp\/v2\/media\/108138"}],"wp:attachment":[{"href":"https:\/\/www.applus-erp.de\/en\/wp-json\/wp\/v2\/media?parent=111431"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.applus-erp.de\/en\/wp-json\/wp\/v2\/tags?post=111431"},{"taxonomy":"whitepaper_categories","embeddable":true,"href":"https:\/\/www.applus-erp.de\/en\/wp-json\/wp\/v2\/whitepaper_categories?post=111431"},{"taxonomy":"glossar_tags","embeddable":true,"href":"https:\/\/www.applus-erp.de\/en\/wp-json\/wp\/v2\/glossar_tags?post=111431"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.applus-erp.de\/en\/wp-json\/wp\/v2\/ppma_author?post=111431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}