/
(OH-2202) Authorizations

(OH-2202) Authorizations

Owned by SNP
Last updated: Feb 16, 2022 by Marian Vidra

This topic covers the authorizations in OutBoard Housekeeping cockpit that permit/forbid specific Housekeeping activities.
Using transaction PFCG, different OutBoard Housekeeping roles can be created and assigned to the users.
An authorization topic is split into two parts – admin and user roles.
Admin role enables the user to maintain the OutBoard Housekeeping central system. It covers Housekeeping GUI activities.
User role covers all the authorizations required by OutBoard Housekeeping tasks to be executed on remote systems.

In this section:

Warning:

If the central system is maintained with OutBoard Housekeeping (it means, RFC destination is 'NONE'), the user that schedules the task is required to have the appropriate authorizations.

OutBoard Housekeeping Admin role

OutBoard Housekeeping admin role is provided in a form of a role called /DVD/ERNA_ADMIN. This role enables all Housekeeping activities in GUI. The transport of this role is part of a delivery package.
This role can be copied using the PFCG transaction. The role copy can then be modified to enable/disable specific tasks and later to be assigned to OutBoard Housekeeping users.

SAP Authorizations

These authorizations are mandatory – DO NOT modify!

Object

S_TCODE

Value 1

Value 2 

Value 3

Fields

TCD




Value

/DVD/ERNA




Value

PFCG




Object

S_BTCH_ADM




Fields

BTCADMIN




Value

*




Object

S_BTCH_JOB




Fields

JOBACTION

JOBGROUP



Value

RELE

' '



Value

DELE

*



Object

S_BTCH_NAM




Fields

BTCUNAME




Value

*




Object

S_CTS_ADMI




Fields

CTS_ADMFCT




Value

TABL




Object

S_CTS_SADM




Fields

CTS_ADMFCT

DESTSYS

DOMAIN


Value

TABL

*

*


Object

S_GUI




Fields

ACTVT




Value

02, 61




Object

S_USER_AGR




Fields

ACTVT

ACT_GROUP



Value

All activities

*



Object

S_USER_AUT




Fields

ACTVT

ACT_GROUP

OBJECT


Value

All activities

*

*


Object

S_USER_GRP




Fields

ACTVT

CLASS



Value

All activities

*



Object

S_USER_PRO




Fields

ACTVT

PROFILE



Value

All activities

*



Object

S_DOKU_AUT




Fields

DOKU_ACT

DOKU_DEVCL

DOKU_MODE


Value

All values

*

All values


Object

S_TRANSLAT




Fields

ACTVT

TLANGUAGE

TRANOBJ


Value

02

*

All values


Object

S_APPL_LOG




Fields

ALG_OBJECT

ALG_SUBOBJ

ACTVT

Description

Value

/DVD/FS /DVD/FS_LOG

*

03

Display

Object

/DVD/ERNA




Fields

/DVD/FSACT

/DVD/FSGRP

/DVD/FSTSK

Description

Value

*

*

*


OutBoard Housekeeping cockpit authorizations

These authorizations can be added/removed as required.
Object/DVD/ERNA

Task Group

Task Name

Activity

Description

SYS

ANL_EXEC

02

Execute analysis

SYS

ANL_EXEC

03

Display analysis

SYS

COCKPIT

03

Enter the cockpit

SYS

LICENSE

02

Maintain license key

SYS

LANDSCAPE

03

Show landscape editor

SYS

LANDSCAPE

02

Switch landscape editor to edit mode

SYS

PROFILE

03

Show Profile editor

SYS

PROFILE

02

Switch Profile editor to edit mode

SYS

RECYCLEBIN

03

Show global RecycleBin

SYS

MONITOR

03

Show global monitor

SYS

CALENDAR

03

Show calendar

SYS

CALENDAR

81

Edit/delete scheduled task Start/stop central scheduler (in global settings)

SYS

SETTINGS

03

Show global settings

SYS

SETTINGS

02

Switch global settings to edit mode

SYS

STATREPORT

03

Display statistics history report

SYS

SYSLOG

03

Show system logs

SYS

TASKINFO

03

Show task info

SYS

SHOWREPORT

03

Show system report

SYS

TABLEBROWS

03

Show table browser

(group)

(task)

16

Undo/delete run or table in RecycleBin

(group)

(task)

16

Set status to OK in the global monitor for a selected task

(group)

(task)

03

Show log for selected task Show monitor for selected task Show log in a global monitor for a selected task

OutBoard Housekeeping system view authorizations

These authorizations can be added/removed as required.
Object/DVD/ERNA

Task Group

Task Name

Activity

Description

(group)

(task)

16

Execute selected task (from the context menu)

(group)

(task)

02

Create/update/delete settings for selected task

(group)

(task)

03

Show logs for the selected task

(group)

(task)

03

Show RecycleBin for the selected task

(group)

(task)

16

Undo/delete run or table for the selected task

(group)

(task)

03

Show monitor for the selected task

(group)

(task)

03

Show log from the monitor for the selected task

(group)

(task)

16

Set status to OK from the monitor for the selected task


(group) valid values are checked against /DVD/FS_TASKGRP table
(task) valid values are checked against /DVD/FS_TASK table

OutBoard Housekeeping activity view authorizations

These authorizations can be added/removed as required.
Object/DVD/ERNA

Task Group

Task Name

Activity

Description

(group)

(task)

02

Set inheritance for the selected task

(group)

(task)

16

Execute task for the selected landscape area

(group)

(task)

02

Create/update/delete settings for selected task and landscape area

(group)

(task)

81

Schedule selected tasks for the landscape area

(group)

(task)

03

Show logs for selected task and landscape area

(group) valid values are checked against /DVD/FS_TASKGRP table
(task) valid values are checked against /DVD/FS_TASK table

OutBoard Housekeeping User role

Due to the complexity of the set of authorizations, this is provided in a form of a role called /DVD/ERNA_USER. The transport of this role is part of a delivery package.
It can be assigned to the users used for RFC connections. It is highly recommended not to modify it.