This topic covers the authorizations in OutBoard for Housekeeping cockpit that permit/forbid specific Housekeeping activities.
Using transaction PFCG, different OutBoard for Housekeeping roles can be created and assigned to the users.
An authorization topic is split into two parts – admin and user roles.
Admin role enables the user to maintain OutBoard for Housekeeping central system. It covers Housekeeping GUI activities.
User role covers all the authorizations required by OutBoard for Housekeeping tasks to be executed on remote systems.
Warning:
If the central system is maintained with OutBoard for Housekeeping (it means, RFC destination is 'NONE'), the user that schedules the task is required to have the appropriate authorizations (see "OutBoard for Housekeeping User role").
...
OutBoard for Housekeeping Admin role
OutBoard for Housekeeping admin role is provided in a form of a role called /DVD/ERNA_ADMIN. This role enables all Housekeeping activities in GUI. The transport of this role is part of a delivery package.
This role can be copied using the PFCG transaction. The role copy can then be modified to enable/disable specific tasks and later to be assigned to OutBoard for Housekeeping users.
...
SAP Authorizations
These authorizations are mandatory – DO NOT modify!
Object | S_TCODE |
|
|
|
Fields | TCD |
|
|
|
Value | /DVD/ERNA |
|
|
|
Value | PFCG |
|
|
|
Object | S_BTCH_ADM |
|
|
|
Fields | BTCADMIN |
|
|
|
Value | * |
|
|
|
Object | S_BTCH_JOB |
|
|
|
Fields | JOBACTION | JOBGROUP |
|
|
Value | RELE | ' ' |
|
|
Value | DELE | * |
|
|
Object | S_BTCH_NAM |
|
|
|
Fields | BTCUNAME |
|
|
|
Value | * |
|
|
|
Object | S_CTS_ADMI |
|
|
|
Fields | CTS_ADMFCT |
|
|
|
Value | TABL |
|
|
|
Object | S_CTS_SADM |
|
|
|
Fields | CTS_ADMFCT | DESTSYS | DOMAIN |
|
Value | TABL | * | * |
|
Object | S_GUI |
|
|
|
Fields | ACTVT |
|
|
|
Value | 02, 61 |
|
|
|
Object | S_USER_AGR |
|
|
|
Fields | ACTVT | ACT_GROUP |
|
|
Value | All activities | * |
|
|
Object | S_USER_AUT |
|
|
|
Fields | ACTVT | ACT_GROUP | OBJECT |
|
Value | All activities | * | * |
|
Object | S_USER_GRP |
|
|
|
Fields | ACTVT | CLASS |
|
|
Value | All activities | * |
|
|
Object | S_USER_PRO |
|
|
|
Fields | ACTVT | RPOFILE |
|
|
Value | All activities | * |
|
|
Object | S_DOKU_AUT |
|
|
|
Fields | DOKU_ACT | DOKU_DEVCL | DOKU_MODE |
|
Value | All values | * | All values |
|
Object | S_TRANSLAT |
|
|
|
Fields | ACTVT | TLANGUAGE | TRANOBJ |
|
Value | 02 | * | All values |
|
Object | S_APPL_LOG |
|
|
|
Fields | ALG_OBJECT | ALG_SUBOBJ | ACTVT | Description |
Value | /DVD/FS /DVD/FS_LOG | * | 03 | Display |
Object | /DVD/ERNA |
|
|
|
Fields | /DVD/FSACT | /DVD/FSGRP | /DVD/FSTSK | Description |
Value | * | * | * |
|
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
These authorizations can be added/removed as required.
Object/DVD/ERNA
Task Group | Task Name | Activity | Description |
SYS | ANL_EXEC | 02 | Execute analysis |
SYS | ANL_EXEC | 03 | Display analysis |
SYS | COCKPIT | 03 | Enter the cockpit |
SYS | LICENSE | 02 | Maintain license key |
SYS | LANDSCAPE | 03 | Show landscape editor |
SYS | LANDSCAPE | 02 | Switch landscape editor to edit mode |
SYS | PROFILE | 03 | Show Profile editor |
SYS | PROFILE | 02 | Switch Profile editor to edit mode |
SYS | RECYCLEBIN | 03 | Show global RecycleBin |
SYS | MONITOR | 03 | Show global monitor |
SYS | CALENDAR | 03 | Show calendar |
SYS | CALENDAR | 81 | Edit/delete scheduled taskStart/stop central scheduler (in global settings) |
SYS | SETTINGS | 03 | Show global settings |
SYS | SETTINGS | 02 | Switch global settings to edit mode |
SYS | STATREPORT | 03 | Display statistics history report |
SYS | SYSLOG | 03 | Show system logs |
SYS | TASKINFO | 03 | Show task info |
SYS | SHOWREPORT | 03 | Show system report |
SYS | TABLEBROWS | 03 | Show table browser |
(group) | (task) | 16 | Undo/delete run or table in RecycleBin |
(group) | (task) | 16 | Set status to OK in global monitor for selected task |
(group) | (task) | 03 | Show log for selected taskShow monitor for selected taskShow log in global monitor for selected task |
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
These authorizations can be added/removed as required.
Object/DVD/ERNA
...
(group)valid values are checked against /DVD/FS_TASKGRP table
(task)valid values are checked against /DVD/FS_TASK table
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
These authorizations can be added/removed as required.
Object/DVD/ERNA
...
(group)valid values are checked against /DVD/FS_TASKGRP table
(task)valid values are checked against /DVD/FS_TASK table
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
| Anchor | ||||
|---|---|---|---|---|
|
Due to the complexity for the set of authorizations, this is provided in a form of a role called /DVD/ERNA_USER. The transport of this role is part of a delivery package.
It can be assigned to the users used for RFC connections. It is highly recommended not to modify it.,