(DI-2208) Users and Authorization roles

Owned by SNP
Last updated: Aug 08, 2022 by Marian Vidra
1 min read

Administration user role

The technical name of this authorization role is /DVD/MON_ADMIN. This authorization role should be assigned to the administration user after installation or to the system user used for the execution of CrystalBridge® Monitoring collector jobs. This role gives users the possibility to:

  • Add/Remove systems in CrystalBridge® Monitoring

  • Start/Stop the monitoring

  • Maintain the CrystalBridge® Monitoring customizing (creation of custom KPIs, Monitoring profiles, etc.)

Viewer role

The technical name of this authorization role is /DVD/MON_VIEWER. This authorization role should be assigned to the users who are not allowed to change the CrystalBridge® Monitoring settings but only view the collected data.

Remote user role

The technical name of this authorization role is /DVD/MON_SATELLITE. This authorization role should be assigned to the system user on the remote system and this system user needs to be set in a defined RFC Destination. It defines all authorizations needed for RFC communication between central and satellite systems.

Information for S/4 HANA remote systems

Authorization role /DVD/MON_SATELLITE has to be regenerated manually on remote SAP system, if this remote system is S/4 HANA system. SAP has added new checks into the standard functionality when getting a list of application servers remotely. If this role is not regenerated on S/4 HANA system manually, you might experience authorization issues while detecting the list of application servers from central SAP system during monitoring.