(Glue-2305) SNP Glue Pre-delivered Role Mapping
- SNP
- Marian Vidra
SNP Glue transports already include a certain list of pre-delivered roles. When used (AUTH_OBJ_GLUE enabled in Expert Settings section of SNP Glue™ Settings), these have to be generated in transaction PFCG and subsequently assigned to respective users.
The purpose of these roles is primarily the Segregation of Duties.
Authorization Role | Activity | /DVD/GLUE_USER | /DVD/SM_ADMIN | /DVD/GLUE_ALL | /DVD/GLUE_EDIT | /DVD/GLUE_TRANSPORT | /DVD/GL_READ_DATA | /DVD/GLUE_RUN | /DVD/GLUE_DISPLAY | /DVD/SM_EDIT | /DVD/SM_DISPLAY |
|---|---|---|---|---|---|---|---|---|---|---|---|
Create table in Glue11 | CRE_GLUE11 | X |
| X | X |
|
|
|
|
|
|
Display table in Glue11 | DIS_GLUE11 | X |
| X | X |
|
|
| X |
|
|
Display storage table data in Glue16 | DIS_GLUE16 | X |
| X |
|
| X |
|
|
|
|
Manage table in Glue14 | MAN_GLUE14 | X |
| X | X |
|
|
|
|
|
|
Display Extractor | DIS_EXT | X |
| X | X |
|
| X | X |
|
|
Create and manage Extractor | MAN_EXT | X |
| X | X |
|
|
|
|
|
|
Run extraction | RUN_EXT | X |
| X | X |
|
| X |
|
|
|
Edit BPL | MAN_BPL | X |
| X | X |
|
|
|
|
|
|
Transport Glue objects | CRE_TMS | X |
| X |
| X |
|
|
|
|
|
Import Glue objects | IMP_TMS | X |
| X |
| X |
|
|
|
|
|
Display queue | DIS_QUE | X |
| X | X |
|
| X | X |
|
|
Manage queue | MAN_QUE | X |
| X | X |
|
| X |
|
|
|
Display Infoprovider | DIS_IP | X |
| X | X |
|
|
| X |
|
|
Manage Infoprovider | MAN_IP | X |
| X | X |
|
|
|
|
|
|
Read alll clients | ALL_CLIENT | X |
| X |
|
|
|
|
|
|
|
Manage glue settings | MAN_SETT | X |
| X |
|
|
|
|
|
|
|
Create new storage | CREATE_STORAGE |
| X | X |
|
|
|
|
| X |
|
Delete existing storage | DELETE_STORAGE |
| X | X |
|
|
|
|
| X |
|
Display existing storage | DISPLAY_STORAGE |
| X | X |
|
|
|
|
| X | X |
Edit existing storage | EDIT_STORAGE |
| X | X |
|
|
|
|
| X |
|
Switch to Edit mode in /DVD/SM_SETUP | SM_SETUP_EDIT |
| X | X |
|
|
|
|
|
|
|
Editing JCO management | EDIT_JCO |
| X | X |
|
|
|
|
|
|
|
Roles /DVD/GLUE_USER and /DVD/SM_ADMIN do already contain some of the SAP standard authorizations, which are required to run SNP Glue. These are typically already available to users operating SNP Glue. Their primary usage is on a non-productive system, to speed up the process as much as possible.
The rest of the roles are limited to SNP Glue authorization objects.